Which of the following terms related to risk management represents the estimated frequency at
which a threat is expected to occur?

Which of the following types of agreement creates a confidential relationship between the parties
to protect any type of confidential and proprietary information or a trade secret?

Which of the following sections come under the ISO/IEC 27002 standard?

Which of the following U.S. Federal laws addresses computer crime activities in communication
lines, stations, or systems?

Which of the following access control models uses a predefined set of access privileges for an
object of a system?

Which of the following statements about the availability concept of Information security
management is true?

Which of the following is a process that identifies critical information to determine if friendly actions
can be observed by adversary intelligence systems?

Which of the following administrative policy controls is usually associated with government
classifications of materials and the clearances of individuals to access those materials?

Which of the following processes will you involve to perform the active analysis of the system for
any potential vulnerabilities that may result from poor or improper system configuration, known
and/or unknown hardware or software flaws, or operational weaknesses in process or technical
countermeasures?

Which of the following are the levels of military data classification system? Each correct answer
represents a complete solution. Choose all that apply.