Which of the following statements about Discretionary Access Control List (DACL) is true?

Which types of project tends to have more well-understood risks?

Which of the following processes is described in the statement below? “This is the process
of numerically analyzing the effect of identified risks on overall project objectives.”

Eric is the project manager of the NQQ Project and has hired the ZAS Corporation to
complete part of the project work for Eric’s organization. Due to a change request the ZAS
Corporation is no longer needed on the project even though they have completed nearly all
of the project work. Is Eric’s organization liable to pay the ZAS Corporation for the work they
have completed so far on the project?

Mark works as a project manager for TechSoft Inc. Mark, the project team, and the key
project stakeholders have completed a round of qualitative risk analysis. He needs to
update the risk register with his findings so that he can communicate the risk results to the
project stakeholders – including management. Mark will need to update all of the following
information except for which one?

Numerous information security standards promote good security practices and define
frameworks or systems to structure the analysis and design for managing information
security controls. Which of the following are the U.S. Federal Government information
security standards? Each correct answer represents a complete solution. Choose all that
apply.

Which of the following tasks are identified by the Plan of Action and Milestones document?
Each correct answer represents a complete solution. Choose all that apply.

Jenny is the project manager for the NBT projects. She is working with the project team and
several subject matter experts to perform the quantitative risk analysis process. During this
process she and the project team uncover several risks events that were not previously
identified. What should Jenny do with these risk events?

Shoulder surfing is a type of in-person attack in which the attacker gathers information
about the premises of an organization. This attack is often performed by looking
surreptitiously at the keyboard of an employee’s computer while he is typing in his password
at any access point such as a terminal/Web site. Which of the following is violated in a
shoulder surfing attack?

Harry is the project manager of the MMQ Construction Project. In this project Harry has
identified a supplier who can create stained glass windows for 1,000 window units in the
construction project. The supplier is an artist who works by himself, but creates windows for
several companies throughout the United States. Management reviews the proposal to use
this supplier and while they agree that the supplier is talented, they do not think the artist
can fulfill the 1,000 window units in time for the project’s deadline. Management asked
Harry to find a supplier who will guarantee the completion of the windows by the needed
date in the schedule. What risk response has management asked Harry to implement?