Question 111

A security professional is assessing the risk in an application and does not take into account any mitigating or compensating controls. This type of risk rating is an example of which of the following?
  • Question 112

    In The Open System Interconnection (OSI) model, which layer is responsible for the transmission of binary data over a communications network?
  • Question 113

    What technique used for spoofing the origin of an email can successfully conceal the sender s Internet Protocol (IP) address?
  • Question 114

    Which of the following BEST represents the concept of least privilege?
  • Question 115

    A security compliance manager of a large enterprise wants to reduce the time it takes to perform network, system, and application security compliance audits while increasing quality and effectiveness of the results.
    What should be implemented to BEST achieve the desired results?