Explanation/Reference:
Explanation:
A PERT chart will help determine project duration once all the activities and the work involved with those activities are known. Function point analysis is a technique for determining the size of a development task based on the number of function points. Function points are factors such as inputs, outputs, inquiries, logical internal files, etc. While this will help determine the size of individual activities, it will not assist in determining project duration since there are many overlapping tasks. Rapid application development is a methodology that enables organizations to develop strategically important systems faster while reducing development costs and maintaining quality, while object-oriented system development is the process of solution specification and modeling.

Section: Protection of Information Assets
Explanation/Reference:
Dial-up connectivity not based on centralize control and least preferred from security and control
standpoint.
Remote access user can connect remotely to their organization's networks with the same level of
functionality as if they would access from within their office.
In connecting to an organization's network, a common method is to use dial-up lines. Access is granted
through the organization's network access server (NAS) working in concert with an organization network
firewall and router. The NAS handle user authentication, access control and accounting while maintaining
connectivity. The most common protocol for doing this is the Remote Access Dial-In User Service
(RADIUS) and Terminal Access Controller Access Controller System (TACACS).
Remote access Controls include:
Policy and standard
Proper authorization
Identification and authentication mechanism
Encryption tool and technique such as use of VPN
System and network management
The following reference(s) were/was used to create this question:
CISA Review Manual 2014 Page number 334

The primary purpose of business continuity planning and disaster-recovery planning is to mitigate, or reduce, the risk and impact of a business interruption or disaster. Total elimination of risk is impossible.

Explanation/Reference:
Adopting and communicating a comprehensive antivirus policy is the most fundamental step in preventing virus attacks. All other antivirus prevention efforts rely upon decisions established and communicated via policy.