An effective information security policy should be designed with a long-term focus. All other characteristics apply.
Source: ALLEN, Julia H., The CERT Guide to System and Network Security Practices,
Addison-Wesley, 2001, Appendix B, Practice-Level Policy Considerations (page 397).

Answer "Rings an audible alarm on the local premises that it protects" describes a Local
Alarm System.
Answer "Rings an alarm in the office of the customer" describes a Proprietary System.
Answer "Also rings an alarm in the local fire or police station" describes an Auxiliary Station
System.

Acomponent whose state is to be recorded and against which changes are to be progresseD. The other answers are incorrect by the definition of a configuration item.

In general there are three ways a pen tester can test a target system.
-White-Box: The tester has full access and is testing from inside the system.
-Gray-Box: The tester has some knowledge of the system he's testing.
-Black-Box: The tester has no knowledge of the system.
Each of these forms of testing has different benefits and can test different aspects of the system
from different approaches.
The following answers are incorrect:
-Black-Box Pen Testing: This is where no prior knowledge is given about the target network. Only a domain name or business name may be given to the analyst.
-Penetration Testing: This is half correct but more specifically it is white-box testing because the tester has full access.
-Gray-Box Pen Testing: This answer is not right because Gray-Box testing you are given a little information about the target network.
The following reference(s) was used to create this question: 2013 Official Security+ Curriculum. and tester is provided no information about the target's network or environment. The tester is simply left to his abilities Hernandez CISSP, Steven (2012-12-21). Official (ISC)2 Guide to the CISSP CBK, Third Edition ((ISC)2 Press) (Kindle Locations 4742-4743). Auerbach Publications. Kindle Edition.