Which of the following ensures that a TCB is designed, developed, and maintained with formally controlled
standards that enforces protection at each stage in the system’s life cycle?

Which of the following ensures that security is NOT breached when a system crash or other system failure
occurs?

The number of violations that will be accepted or forgiven before a violation record is produced is called which
of the following?

It is a violation of the “separation of duties” principle when which of the following individuals access the software
on systems implementing security?

Which of the following is covered under Crime Insurance Policy Coverage?

Which of the following is a CHARACTERISTIC of a decision support system (DSS) in regards to Threats and
Risks Analysis?

You are a manager for a large international bank and periodically move employees between positions in your
department. What is this process called?

Which of the following Confidentiality, Integrity, Availability (CIA) attribute supports the principle of least privilege
by providing access to information only to authorized and intended users?

Which type of risk assessment is the formula ALE = ARO x SLE used for?

Which of the following pairings uses technology to enforce access control policies?