Common Criteria has assurance level from EAL 1 to EAL 7 regarding the depth of design and testing. Which of
following assure the Target of Evaluation (or TOE) is methodically designed, tested and reviewed?

Which must bear the primary responsibility for determining the level of protection needed for information
systems resources?

Who should measure the effectiveness of Information System security related controls in an organization?

Which of the following would best describe the difference between white-box testing and black-box testing?

What setup should an administrator use for regularly testing the strength of user passwords?

Which of the following testing method examines internal structure or working of an application?

Which one of the following is NOT one of the outcomes of a vulnerability assessment?

Which of the following answers best describes the type of penetration testing where the analyst has full
knowledge of the network on which he is going to perform his test?

A network-based vulnerability assessment is a type of test also referred to as:

Which of the following is a not a preventative control?