The _____________ relies on individual or small group interviews during the first round of information gathering and relies on face-to-face interaction during later rounds of data organizing and reporting.

Which of the following is a method for determining functions, identifying functional failures, and assessing the causes of failure and their failure effects through a structured process?

Which of the following is a risk methodology that is intended to be used in situations where people manage and direct the risk evaluation for information security within their company?

Which of the following was designed to explore a qualitative risk assessment process in a manner that allows for tests to be conducted on different aspects and variations of the methodology?

Management establishes a policy that requires that all information technology professionals must have a college degree with a core emphasis on information technology, and that all system administrators must have a security certification from an accredited program. By doing so, management has established what?

Which of the following term describes the creation, maintenance, anddeactivation of user objects and attributes as they exist in one or more systems,directories, or applications, in response to business processes?

Your company has hired a risk management firm to evaluate the organizations overall health and risks. One area that is quickly identified is a small warehouse in a heavily populated area that holds valuable assets. The warehouse has no perimeter defenses. This lack of protection would be characterized as a ________.

Capability tables are bound to what?

The Kerberos technology has some issues that need to be understood before access control implementation.. Which of the following are issues pertaining to Kerberos?

i.The KDC can be a single point of failure. If the KDC goes down, no one canaccess needed resources. Redundancy is necessary for the KDC.
ii. The KDC must be able to handle the number of requests it receives in a timelymanner. It must be scalable.
iii. Secret keys are temporarily stored on the users’ workstations, which means itis possible for an intruder to obtain these cryptographic keys.
iv. Session keys are decrypted and reside on the users’ workstations, either in acache or in a key table. Again, an intruder can capture these keys.

Which matches the following definition, "The use of needles to remove the outerprotective material on the cards circuits, by using ultrasonic vibration. Once thisis completed then data can be accessed and manipulated by directly tapping into thecards ROM chips"?