When application-level security controlled by business process owners is found to be poorly managed, which of
the following could BEST improve current practices?

Access control to a sensitive intranet application by mobile users can BEST be implemented through:

An intranet server should generally be placed on the:

On which of the following should a firewall be placed?

Which of the following devices should be placed within a demilitarized zone (DMZ)?

Which of the following is the MOST appropriate frequency for updating antivirus signature files for antivirus
software on production servers?

Which of the following is generally used to ensure that information transmitted over the Internet is authentic and
actually transmitted by the named sender?

Which of the following is the MOST effective solution for preventing internal users from modifying sensitive and
classified information?

Who can BEST approve plans to implement an information security governance framework?

When a proposed system change violates an existing security standard, the conflict would be BEST resolved
by: