An external auditor has found that IT security policies in the organization are not maintained and in
some cases are nonexistent. As a result of the audit findings, the CISO has been tasked with the
objective of establishing a mechanism to manage the lifecycle of IT security policies. Which of the
following can be used to BEST achieve the CISO’s objectives?

In a SPML exchange, which of the following BEST describes the three primary roles?

A trust relationship has been established between two organizations with web based services.
One organization is acting as the Requesting Authority (RA) and the other acts as the Provisioning
Service Provider (PSP). Which of the following is correct about the trust relationship?

A Security Administrator has some concerns about the confidentiality of data when using SOAP.
Which of the following BEST describes the Security Administrator’s concerns?

Which of the following protocols only facilitates access control?

Company ABC will test connecting networks with Company XYZ as part of their upcoming merger
and are both concerned with minimizing security exposures to each others network throughout the
test. Which of the following is the FIRST thing both sides should do prior to connecting the
networks?