Section: Protection of Information Assets

Explanation/Reference:
Explanation:
Encapsulation, or tunneling, is a technique used to carry the traffic of one protocol over a network that does not support that protocol directly. The original packet is wrapped in another packet. The other choices are not security techniques specific to VPNs.

Section: Information System Operations, Maintenance and Support
Explanation/Reference:

Source code escrow protects an application purchaser's ability to fix or change an application in case the application vendor goes out of business.

The most important thing to assess when conducting a business impact analysis (BIA) is the completeness of critical asset inventory. This is because the critical asset inventory is the basis for identifying and prioritizing the business processes, functions, and resources that are essential for the continuity of operations. The critical asset inventory should include both tangible and intangible assets, such as hardware, software, data, personnel, facilities, contracts, and reputation. The critical asset inventory should also be updated regularly to reflect any changes in the business environment or needs. References:
* CISA Review Manual (Digital Version), Chapter 5, Section 5.41
* CISA Online Review Course, Domain 3, Module 3, Lesson 12