Sam is a new manager at a retail store. He has been informed that the company has had a continual problem of users installing unapproved software. Which of the following is the first item that Sam should have developed and implanted?

In the aftermath of computer crime, it is discovered that the act was carried out by an employee with privileged access. Of the following, which would be considered the best method for preventing privileged user misuse?

Jonathan works in a highly secure environment where user and data classification is closely monitored. There are very few privileged users who can access all devices at a privileged level. When dealing with this type of access level, which is true?

As part of the overall disaster recovery plan, the team writes business continuity procedures that work to return operations to normal conditions. What type of control is the business continuity procedure?

Which of the following is an incorrect statement?

i.A system reboot takes place after the system shuts itself down in an uncontrolled manner in response to a kernel (trusted computing base) failure.
ii. An emergency system restart takes place after a system failure happens in an uncontrolled manner.
iii. A system cold start takes place when an expected kernel or media failure happens and the regular recovery procedure cannot recover the system to a more consistent state.
iv. A system warm start takes place when an expected kernel or media failure happens and the regular recovery procedure cannot recover the system to a more consistent state.

Monitoring temperature and humidity levels in equipment rooms is a critical security control that operations groups must achieve. What type of control is this?

Which of the following has an incorrect definition mapping?

i.Best evidence is the primary evidence used in a trial because it provides the most reliability.
ii. Secondary evidence is not viewed as reliable and strong in proving innocence or guilt (or liability in civil cases) when compared to best evidence.
iii. Conclusive evidence is refutable and cannot be contradicted.
iv. Circumstantial evidence can prove an intermediate fact that can then be used to deduce or assume the existence of another fact.
v. Hearsay evidence pertains to oral or written evidence presented in court that is secondhand and has no firsthand proof of accuracy or reliability.

Which of the following is not considered an operational assurance responsibility?

During the examination and analysis process of a forensics investigation, it is critical that the investigator works from an image that contains all of the data from the original disk. The image must have all but which of the following characteristics?