Which of the following is critical for establishing an initial baseline for software components in the
operation and maintenance of applications?

Which of the following actions MUST be taken if a vulnerability is discovered during the maintenance
stage in a System Development Life Cycle (SDLC)?

Which of the following provides effective management assurance for a Wireless Local Area Network
(WLAN)?

From a security perspective, which of the following is a best practice to configure a Domain Name
Service (DNS) system?

Which of the following is the MOST beneficial to review when performing an IT audit?

During an investigation of database theft from an organization’s web site, it was determined that the
Structured Query Language (SQL) injection technique was used despite input validation with clientside scripting. Which of the following provides the GREATEST protection against the same attack
occurring again?

With data labeling, which of the following MUST be the key decision maker?

Which of the following is a critical factor for implementing a successful data classification program?

An organization’s data policy MUST include a data retention period which is based on

What is the MOST important reason to configure unique user IDs?