• Question 5 Which security policy framework focuses on concepts, practices, and processes for managing and delivering IT services?
• Question 6 The core requirement of an automated IT security control library is that the information is ________.
• Question 7 A fundamental component of internal control for highrisk transactions is __________.
• Question 8 An unauthorized user accessed protected network storage and viewed personnel records. What has been lost?
• Question 9 During which phase of the COBIT ISS management life cycle do you review how you are going to manage your IT investment such as contracts, service level agreements( SLAs), and new policy ideas?
• Question 10 Which of the following starts as an industry norm, and over time, becomes the measuring stick by which regulators judge organizations?
• Question 11 Passwords and biometrics are most closely associated with which of the following?
• Question 12 Policies and procedures differ in that policies are ________ and procedures are __________.
• Question 13 Which of the following is optional, and sets the parameters within which the others can be used?
• Question 14 A backup generator is an example of which type of security control?
• Question 15 What does " tone at the top " refer to?
• Question 16 Log monitoring and review is an example of which type of security control?
• Question 17 A( n) _______ is a confirmed event that compromises the confidentiality, integrity, or availability of information.
• Question 18 Which of the following is a physical control?
• Question 19 Which of the following is not a generally accepted principle for implementing a security awareness program?
• Question 20 In which domain is virtual private networking a security control?
• Question 21 You are on the West Coast but want to connect to your company ' s intranet on the East Coast. You use a program to " tunnel " through the Internet to reach the intranet. Which technology are you using?