QUESTION 142
Which of the following server categories stores the information about host accounts and implements security policies in its particular domain?

QUESTION 143
Disaster recovery plan consists of various tiers for identifying the methods of recovering mission-critical computer systems that are necessary to support business continuity. All these tiers provide a simple method to define current service levels and associated risks.
Choose and re-order the tiers of disaster recovery plan.

QUESTION 144
Which of the following SSE-CMM security engineering Process Areas (PA) specifies the security needs?

QUESTION 145
Which of the following terms describes the annually expected financial loss to an organization from a threat?

QUESTION 146
Nancy is working as a network administrator for a small company. Management wants to implement a RAID storage for their organization. They want to use the appropriate RAID level for their backup plan that will satisfy the following requirements:
* It has a parity check to store all the information about the data in multiple drives.
* Help reconstruct the data during downtime.
* Process the data at a good speed.
* Should not be expensive.The management team asks Nancy to research and suggest the appropriate RAID level that best suits their requirements. What RAID level will she suggest?

QUESTION 147
Software Development Life Cycle (SDLC) is a logical process used by the programmers to develop software.
Which SDLC phase meets the following audit objectives?
System and data are validated.
System meets all user requirements.
System meets all control requirements.

QUESTION 148
Which of the following workforces works to handle the incidents in an enterprise?

QUESTION 149
Fill in the blank:
A ___________plan is a plan devised for a specific situation when things could go wrong.

QUESTION 150
Which of the following clusters provides consistent file system images across servers in a cluster, allowing the servers to simultaneously read and write to a single shared file system?

QUESTION 151
Fill in the blank:
A ___________plan is a plan devised for a specific situation when things could go wrong.

QUESTION 152
ABC Investment Bank is implementing a security and disaster recovery plan. As part of the plan, it sets up several remote data centers across the globe. The objective was to not have all the records of any one important client at one location but to distribute chunks of it throughout these centers. This was so if any one of the centers is compromised, the attacker will not have only chunks of data and will not be able to use it maliciously against the bank’s clients. One other advantage of this is that if a center is struck by a disaster, all the data about a client’s portfolio is not lost. For this plan to work, a percentage of deviation should not exist between the actual and targeted business data. Which recovery metric best defines this percentage of deviation?

QUESTION 153
Which of the following terms refers to the evaluation of the potential interruptions in the working of a department due to the failure of their internal systems?

QUESTION 154
Which of the following tools in Helix Windows Live is used to reveal the database password of password protected MDB files created using Microsoft Access or with Jet Database Engine?

QUESTION 155
Which of the following is NOT an advantage of colocation facilities?

QUESTION 156
Which of the following techniques verifies that data is safe, secure, and readable after going through processes like update, restore, or retrieve?

QUESTION 157
Matt wants his organization to be prepared for any disaster that may occur in the future. In his preparations for the same, he wants to implement a robust storage system for his servers. After conducting thorough research, he arrives at the conclusion that PASIS architecture would be best suited for his requirements as it combines several critical components to provide survivable data storage. Which of the following components does the PASIS architecture integrate?

QUESTION 158
Fill in the blank with the appropriate number:
RAID-________ is a combination of RAID-1 and RAID-0.

QUESTION 159
Which of the following documents helps disaster recovery team members in getting the alternate sites up and running?

QUESTION 160
Which of the following terms refers to a storage technology that is used to capture real-time data changes and facilitate data restore points and recovery?

QUESTION 161
Which of the following is the simulation of the disaster recovery plans?

QUESTION 162
Which of the following terms refers to the backing up of files that have been modified, changed, or have been added since the last full backup?

QUESTION 163
You are an Incident manager in Orangesect.Inc. You have been tasked to set up a new extension of your enterprise. The networking, to be done in the new extension, requires different types of cables and an appropriate policy that will be decided by you. Which of the following stages in the Incident handling process involves your decision making?

QUESTION 164
Which of the following TCB techniques involves viewing system components at a high level and ignoring or segregating its specific details?

QUESTION 165
Software Development Life Cycle (SDLC) is a logical process used by the programmers to develop software. Which SDLC phase meets the following audit objectives?
System and data are validated.
System meets all user requirements.
System meets all control requirements.

QUESTION 166
Which of the following acts of information security governance affects the financial institutions?