Joe, a security analyst, asks each employee of an organization to sign a statement saying that they
understand how their activities may be monitored. Which of the following BEST describes this statement?
(Select TWO).

Joe, a newly hired employee, has a corporate workstation that has been compromised due to several
visits to P2P sites. Joe insisted that he was not aware of any company policy that prohibits the use of such
web sites. Which of the following is the BEST method to deter employees from the improper use of the
company’s information systems?

Pete, a security analyst, has been informed that the development team has plans to develop an
application which does not meet the company’s password policy. Which of the following should Pete do
NEXT?

A major security risk with co-mingling of hosts with different security requirements is:

Which of the following provides the BEST explanation regarding why an organization needs to implement
IT security policies?

Which of the following should Pete, a security manager, implement to reduce the risk of employees
working in collusion to embezzle funds from their company?

Two members of the finance department have access to sensitive information. The company is concerned
they may work together to steal information. Which of the following controls could be implemented to
discover if they are working together?

Mandatory vacations are a security control which can be used to uncover which of the following?

While rarely enforced, mandatory vacation policies are effective at uncovering:

A company that has a mandatory vacation policy has implemented which of the following controls?