The NIST Information Security and Privacy Advisory Board (ISPAB) paper “Perspectives on Cloud
Computing and Standards” specifies potential advantages and disdvantages of virtualization.
Which of the following disadvantages does it include? Each correct answer represents a complete
solution. Choose all that apply.

Which of the following are the types of access controls? Each correct answer represents a
complete solution. Choose three.

What are the subordinate tasks of the Initiate and Plan IA C&A phase of the DIACAP process?
Each correct answer represents a complete solution. Choose all that apply.

Which of the following attacks causes software to fail and prevents the intended users from
accessing software?

FITSAF stands for Federal Information Technology Security Assessment Framework. It is a
methodology for assessing the security of information systems. Which of the following FITSAF
levels shows that the procedures and controls have been implemented?

Which of the following is a name, symbol, or slogan with which a product is identified?

Della work as a project manager for BlueWell Inc. A threat with a dollar value of $250,000 is
expected to happen in her project and the frequency of threat occurrence per year is 0.01. What
will be the annualized loss expectancy in her project?

Which of the following coding practices are helpful in simplifying code? Each correct answer
represents a complete solution. Choose all that apply.

Which of the following methods does the Java Servlet Specification v2.4 define in the
HttpServletRequest interface that control programmatic security? Each correct answer represents
a complete solution. Choose all that apply.

You are the project manager of the CUL project in your organization. You and the project team are
assessing the risk events and creating a probability and impact matrix for the identified risks.
Which one of the following statements best describes the requirements for the data type used in
qualitative risk analysis?