Which of the following BCP teams handles financial arrangement, public relations, and media
inquiries in the time of disaster recovery?

Eric is the project manager of the NQQ Project and has hired the ZAS Corporation to complete
part of the project work for Eric’s organization. Due to a change request the ZAS Corporation is no
longer needed on the project even though they have completed nearly all of the project work. Is
Eric’s organization liable to pay the ZAS Corporation for the work they have completed so far on
the project?

Which of the following are the goals of risk management? Each correct answer represents a
complete solution. Choose three.

You are working as a project manager in your organization. You are nearing the final stages of
project execution and looking towards the final risk monitoring and controlling activities. For your
project archives, which one of the following is an output of risk monitoring and control?

Della works as a security manager for SoftTech Inc. She is training some of the newly recruited
personnel in the field of security management. She is giving a tutorial on DRP. She explains that
the major goal of a disaster recovery plan is to provide an organized way to make decisions if a
disruptive event occurs and asks for the other objectives of the DRP. If you are among some of
the newly recruited personnel in SoftTech Inc, what will be your answer for her question? Each
correct answer represents a part of the solution. Choose three.

Fill in the blank with an appropriate phrase. ______________ is used to provide security
mechanisms for the storage, processing, and transfer of data.

Software Development Life Cycle (SDLC) is a logical process used by programmers to develop
software. Which of the following SDLC phases meets the audit objectives defined below: System
and data are validated. System meets all user requirements. System meets all control
requirements.

You are the project manager of the NGQQ Project for your company. To help you communicate
project status to your stakeholders, you are going to create a stakeholder register. All of the
following information should be included in the stakeholder register except for which one?

Which of the following are examples of physical controls used to prevent unauthorized access to
sensitive materials?

Which of the following security issues does the Bell-La Padula model focus on?