Sara, a security manager, has decided to force expiration of all company passwords by the close
of business day. Which of the following BEST supports this reasoning?

Which of the following presents the STRONGEST access control?

Which of the following BEST describes using a smart card and typing in a PIN to gain access to a

system?

Which of the following encompasses application patch management?

Which of the following describes the process of removing unnecessary accounts and services
from an application to reduce risk exposure?

Sara, an application developer, implemented error and exception handling alongside input
validation. Which of the following does this help prevent?

Which of the following MUST Matt, a security administrator, implement to verify both the integrity
and authenticity of a message while requiring a shared secret?

Which of the following is the LEAST volatile when performing incident response procedures?

Pete, a developer, writes an application. Jane, the security analyst, knows some things about the
overall application but does not have all the details. Jane needs to review the software before it is
released to production. Which of the following reviews should Jane conduct?

Visitors entering a building are required to close the back door before the front door of the same
entry room is open. Which of the following is being described?