A.verify that all security controls have been implemented properly and are operating in the correct manner.

B.comply with applicable laws and regulations.

C.allow senior management to make an informed decision regarding whether to accept the risk of operating the system.

D.protect an organization's sensitive data.

A.System administrator access compromised

B.Internal user accidentally accessing data

C.Third-party vendor with access to the system

D.Internal attacker with access to the system

A.Simplifies the management of access rights

B.Supports Mandatory Access Control (MAC)

C.Requires two factor authentication

D.Relies on rotation of duties

A.Discoveries of natural phenomena

B.New and non-obvious invention

C.Ideas expressed n literary works

D.A particular expression of an idea

A.assign the roles and responsibilities of the firewall administrators.

B.define the intended audience who will read the firewall policy.

C.perform a risk analysis to identify issues to be addressed.

D.identify mechanisms to encourage compliance with the policy.