Which of the following defines the communication link between a Web server and Web
applications?

Which of the following plans is documented and organized for emergency response, backup
operations, and recovery maintained by an activity as part of its security program that will ensure
the availability of critical resources and facilitates the continuity of operations in an emergency
situation?

Which of the following features of the Cisco MDS 9000 SAN Extension over IP Package help in
implementing efficient FCIP-based business-continuity and disaster-recovery solutions?
Each correct answer represents a complete solution. Choose all that apply.

Which of the following methods is a means of ensuring that system changes are approved before
being implemented, and the implementation is complete and accurate?

Which of the following roles is responsible for review and risk analysis of all contracts on a regular
basis?

Which of the following statements about a certification authority (CA) is true?

BS 7799 is an internationally recognized ISM standard that provides high level, conceptual
recommendations on enterprise security. BS 7799 is basically divided into three parts. Which of
the following statements are true about BS 7799?
Each correct answer represents a complete solution. Choose all that apply.

An organization monitors the hard disks of its employees’ computers from time to time. Which
policy does this pertain to?

Which of the following disaster recovery tests includes the operations that shut down at the
primary site, and are shifted to the recovery site according to the disaster recovery plan?

Fill in the blank with the appropriate phrase.
____________ privilege escalation is the process of attempting to access sources with a higher
access, such as a user account trying to access admin privileges.