You have created a team of HR Managers and Project Managers for Blue Well Inc. The team will
concentrate on hiring some new employees for the company and improving the organization’s
overall security by turning employees among numerous job positions. Which of the following steps
will you perform to accomplish the task?

Your project has several risks that may cause serious financial impact should they happen. You
have studied the risk events and made some potential risk responses for the risk events but
management wants you to do more. They’d like for you to create some type of a chart that
identified the risk probability and impact with a financial amount for each risk event. What is the
likely outcome of creating this type of chart?

Which of the following persons is responsible for testing and verifying whether the security policy
is properly implemented, and the derived security solutions are adequate or not?

Which of the following are the process steps of OPSEC? Each correct answer represents a part of
the solution. Choose all that apply.

You work as a project manager for SoftTech Inc. A threat with a dollar value of $150,000 is
expected to happen in your project and the frequency of threat occurrence per year is 0.001.
What will be the annualized loss expectancy in your project?

Which of the following are the responsibilities of the owner with regard to data in an information
classification program? Each correct answer represents a complete solution. Choose three.

You work as the Network Administrator for a defense contractor. Your company works with
sensitive materials and all IT personnel have at least a secret level clearance. You are still
concerned that one individual could perhaps compromise the network (intentionally or
unintentionally) by setting up improper or unauthorized remote access. What is the best way to
avoid this problem?

Which of the following statements is true about auditing?

Fill in the blank with an appropriate phrase. _______is a branch of forensic science pertaining to
legal evidence found in computers and digital storage media.

Your project team has identified a project risk that must be responded to. The risk has been
recorded in the risk register and the project team has been discussing potential risk responses for
the risk event. The event is not likely to happen for several months but the probability of the event
is high. Which one of the following is a valid response to the identified risk event?