Rachael is the project manager for a large project in her organization. A new change request has
been proposed that will affect several areas of the project. One area of the project change impact is
on work that a vendor has already completed. The vendor is refusing to make the changes as they’ve
already completed the project work they were contracted to do. What can Rachael do in this
instance?

Mark works as a security manager for SoftTech Inc. He is performing a security awareness program.
To be successful in performing the awareness program, he should take into account the needs and
current levels of training and understanding of the employees and audience.
There are five key ways, which Mark should keep in mind while performing this activity.
Current level of computer usage
What the audience really wants to learn
How receptive the audience is to the security program
How to gain acceptance
Who might be a possible ally
Which of the following activities is performed in this security awareness process?

How many change control systems are there in project management?

Which of the following signatures watches for the connection attempts to well-known, frequently
attacked ports?

In which of the following phases of the SDLC does the software and other components of the system
faithfully incorporate the design specifications and provide proper documentation and training?

Configuration Management (CM) is an Information Technology Infrastructure Library (ITIL) IT Service
Management (ITSM) process. Configuration Management is used for which of the following?
1.To account for all IT assets
2.To provide precise information support to other ITIL disciplines
3.To provide a solid base only for Incident and Problem Management
4.To verify configuration records and correct any exceptions

Which of the following protocols are used to provide secure communication between a client and a
server over the Internet? Each correct answer represents a part of the solution. Choose two.

How can you calculate the Annualized Loss Expectancy (ALE) that may occur due to a threat?

Which of the following rate systems of the Orange book has no security controls?

Which of the following documents is described in the statement below?
“It is developed along with all processes of the risk management. It contains the results of the
qualitative risk analysis, quantitative risk analysis, and risk response planning.”