Mark works as a security manager for SoftTech Inc. He is performing a security awareness
program. To be successful in performing the awareness program, he should take into account the
needs and current levels of training and understanding of the employees and audience. There are
five key ways, which Mark should keep in mind while performing this activity. Current level of
computer usage What the audience really wants to learn How receptive the audience is to the
security program How to gain acceptance Who might be a possible ally Which of the following
activities is performed in this security awareness process?

Rachael is the project manager for a large project in her organization. A new change request has
been proposed that will affect several areas of the project. One area of the project change impact
is on work that a vendor has already completed. The vendor is refusing to make the changes as
they’ve already completed the project work they were contracted to do. What can Rachael do in
this instance?

How many change control systems are there in project management?

Which of the following signatures watches for the connection attempts to well-known, frequently
attacked ports?

In which of the following phases of the SDLC does the software and other components of the
system faithfully incorporate the design specifications and provide proper documentation and
training?

Configuration Management (CM) is an Information Technology Infrastructure Library (ITIL) IT
Service Management (ITSM) process. Configuration Management is used for which of the
following? 1.To account for all IT assets 2.To provide precise information support to other ITIL
disciplines 3.To provide a solid base only for Incident and Problem Management 4.To verify
configuration records and correct any exceptions

Which of the following protocols are used to provide secure communication between a client and a
server over the Internet? Each correct answer represents a part of the solution. Choose two.

How can you calculate the Annualized Loss Expectancy (ALE) that may occur due to a threat?

Which of the following rate systems of the Orange book has no security controls?

Which of the following documents is described in the statement below? “It is developed along with
all processes of the risk management. It contains the results of the qualitative risk analysis,
quantitative risk analysis, and risk response planning.”