Discussion: If a single employee were permitted to stay in one critical position for an
extended period of time without close oversight he or she could carry out fraud undetected.
For this reason it is important to rotate employees between jobs. Another good reason is to get
employees experienced on their colleagues' jobs. This way, if an employee were for some reason
unavailable to work, their position could be covered.
The following answers are incorrect:
Separation of Duties: This is similar to Job Rotation because critical functions are divided up
between employees to avoid and detect fraud. It is incorrect because with Job Rotation, people
move between positions to detect fraud or even get better at each position to provide some
resiliency for the organization. Separation of Duties is more a preventative measure.
Mandatory Rotations: This is incorrect because of the terminology. There are terms called
Mandatory Vacations and Job Rotation but not mandatory rotations. Be familiar with these terms
before trying to pass the exam.
Dual Control: This term describes how a manager would require employees to work together (two
or more) on critical actions so that no single employee can cause catastrophic damage. This isn't
the correct answer but it is very similar to Job Rotation where an employee rotates between job
duties. Dual Control requires employees to work together on critical tasks in hopes of limiting
collusion to commit fraud.
The following reference(s) was used to create this question:
Gregg, Michael; Haines, Billy (2012-02-16). CASP: CompTIA Advanced Security Practitioner
Study Guide Authorized Courseware: Exam CAS-001 (p. 245). Wiley. Kindle Edition.

Explanation/Reference:
Explanation:
RFC 1087 is called "Ethics and the Internet." This RFC outlines the concepts pertaining to what the IAB considers unethical and unacceptable behavior.
Incorrect Answers:
B: RFC 1087 is not related to profession conduct. It concerns Ethics and the Internet.
C: RFC 1087 does not address personal data record keeping.
D: RFC 1087 does not concern consent of use of private data. It is related to Ethics and the Internet.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 1064

Explanation/Reference:
Explanation:
The physical layer consists of the basic networking hardware transmission technologies, such as fiber optics, of a network.
Incorrect Answers:
A: The network layer is responsible for packet forwarding including routing through intermediate routers.
B: The transport layer provide host-to-host communication services for applications. It provides services such as connection-oriented data stream support, reliability, flow control, and multiplexing.
C: The data link layer is responsible for media access control, flow control and error checking.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 530