In digital rights management, the level of robustness depends on the various types of tools and
attacks to which they must be resistant or immune. Which of the following types of tools are
expensive, require skill, and are not easily available?

The National Information Assurance Certification and Accreditation Process (NIACAP) is the
minimum standard process for the certification and accreditation of computer and

telecommunications systems that handle U.S. national security information. What are the different
types of NIACAP accreditation? Each correct answer represents a complete solution. Choose all
that apply.

Which of the following statements about the integrity concept of information security management
are true? Each correct answer represents a complete solution. Choose three.

Which of the following are the important areas addressed by a software system’s security policy?
Each correct answer represents a complete solution. Choose all that apply.

Which of the following specifies the behaviors of the DRM implementation and any applications
that are accessing the implementation?

Which of the following security architectures defines how to integrate widely disparate applications
for a world that is Web-based and uses multiple implementation platforms?

Which of the following recovery plans includes specific strategies and actions to deal with specific
variances to assumptions resulting in a particular security problem, emergency, or state of affairs?

The Chief Information Officer (CIO), or Information Technology (IT) director, is a job title commonly
given to the most senior executive in an enterprise. What are the responsibilities of a Chief
Information Officer? Each correct answer represents a complete solution. Choose all that apply.

You work as a system engineer for BlueWell Inc. You want to verify that the build meets its data
requirements, and correctly generates each expected display and report. Which of the following
tests will help you to perform the above task?

Which of the following governance bodies provides management, operational and technical
controls to satisfy security requirements?