Who should have physical access to network-connectivity devices and corporate servers? A. Customers and clients B. Accounting, information-technology, and auditing staff C. Managers and C-level executives D. Only appropriate information-technology personnel E. Only the maintenance staff

Which of the following represents a valid reason for testing a patch on a nonproduction system, before applying it to a production system? A. Patches may re-enable services previously disabled. B. Patches are a kind of virus. C. Patches always…

How do virtual corporations maintain confidentiality? A. Encryption B. Checksum C. Data hashes D. Redundant servers E. Security by obscurity

Enterprise employees working remotely require access to data at an organization’s headquarters. Which of the following is the BEST method to transfer this data? A. Standard e-mail B. Faxed information C. Dial-in access behind the enterprise firewall D. Virtual private…

Which of the following is NOT a concern for enterprise physical security? A. Network Intrusion Detection Systems B. Social engineering C. Dumpster diving D. Property theft E. Unauthorized access to a facility

A(n) _______________ is an abstract machine, which mediates all access subjects have to objects. A. ACL B. Reference monitor C. State machine D. TCB E. Router

Which of the following are appropriate uses of asymmetric encryption? (Choose THREE.) A. Authentication B. Secure key-exchange mechanisms C. Public Web site access D. Data-integrity checking E. Sneaker net

What is the purpose of resource isolation? A. To reduce the level of broadcast traffic on physical segments. B. To ensure that anyone accessing a resource has appropriate integrity. C. To automate the creation of access control lists and Trusted…

Why should user populations be segmented? A. To allow resources to be shared among employees B. To allow appropriate collaboration, and prevent inappropriate resource sharing C. To prevent appropriate collaboration D. To provide authentication services E. To prevent the generation…

A(n) _______________ is an abstract machine, which mediates all access subjects have to objects. A. ACL B. Reference monitor C. State machine D. TCB E. Router