Which of the following are the levels of public or commercial data classification system? Each
correct answer represents a complete solution. Choose all that apply.

Which of the following statements are true about declarative security? Each correct answer
represents a complete solution. Choose all that apply.

What project management plan is most likely to direct the quantitative risk analysis process for a
project in a matrix environment?

The DoD 8500 policy series represents the Department’s information assurance strategy. Which of
the following objectives are defined by the DoD 8500 series? Each correct answer represents a
complete solution. Choose all that apply.

Which of the following vulnerabilities occurs when an application directly uses or concatenates
potentially hostile input with data file or stream functions?

Which of the following are the primary functions of configuration management?
Each correct answer represents a complete solution. Choose all that apply.

Which of the following are included in Technical Controls? Each correct answer represents a
complete solution. Choose all that apply.

What are the various phases of the Software Assurance Acquisition process according to the U.S.
Department of Defense (DoD) and Department of Homeland Security (DHS) Acquisition and
Outsourcing Working Group?

Companies use some special marks to distinguish their products from those of other companies.
These marks can include words, letters, numbers, drawings, etc. Which of the following terms
describes these special marks?

Which of the following features of SIEM products is used in analysis for identifying potential
problems and reviewing all available data that are associated with the problems?