Explanation/Reference:
Explanation:
To maintain operational assurance, organizations use two basic methods: system audits and monitoring.
Monitoring refers to an ongoing activity whereas audits are one-time or periodic events and can be either internal or external. The essential difference between a self-audit and an independent audit is objectivity, thus indirectly affecting the results of the audit.
Incorrect Answers:
A: Internal and external auditors can use the same tools.
B: Internal and external auditors should return the same results. However, the objectivity of an independent audit may return more comprehensive results.
D: Internal and external auditors should have the same level of competence.

Option "C" is a very bad practice in a firewall connecting one of its interfaces to a public network like Internet. Since in that rule you are allowing all inbound TCP traffic, the hackers can send all the attacks they want to any TCP port, they can make port scanning, Syn Attacks, and many other dangerous DoS activities to our private network.
Permit the traffic from local host is a best practice, our firewall is the local host. Permit SSH
(Secure Shell) is also good because this protocol use cryptography.

The correct answer is 7. Most computer certification and accreditation
standards recommend that diskettes be formatted seven times to
prevent any possibility of data remanence .

The following answers are incorrect because:
Accountability, confidentiality and integrity is not the correct answer as Accountability is not one of
the fundamental principle of security.
Integrity, availability and accountability is not the correct answer as Accountability is not one of the
fundamental principle of security.
Availability, accountability and confidentiality is not the correct answer as Accountability is not one of the fundamental objective of security. References : Shon Harris AIO v3 , Chapter - 3: Security Management Practices , Pages : 49-52