Explanation/Reference:
Explanation:
A Pseudo flaw is appearing as a vulnerability in an operating system program but is in actual fact a trap for intruders who may attempt to exploit the vulnerability.
Incorrect Answers:
B: Pseudocode is an informal high-level description of the operating principle of a software program. It uses some of the syntax and conventions of a programming language, but is intended for human reading rather than machine reading.
C: Bounds checking is used to test for violations in application programming. Essentially, it tests the application's response to inputted data and ensures the inputted data are of an acceptable length.
D: A page fault is caused when the operating kernel attempts to access a page that is in virtual memory rather than in RAM. This often causes the system to halt.
References:
http://itlaw.wikia.com/wiki/Pseudo-flaw
https://en.wikipedia.org/wiki/Pseudocode
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 334 Conrad, Eric, Seth Misenar and Joshua Feldman, CISSP Study Guide, 2nd Edition, Syngress, Waltham,
2012, p. 267

The correct answer is: to create a document to be used to help
understand what impact a disruptive event would have on the business.
Answer "To define a strategy to minimize the effect of disturbances and to allow for the resumption
of business processes" is the definition of business continuity planning.

Explanation/Reference:
Explanation:
A virtual private network (VPN) is a secure, private connection through an untrusted Network. It is a private connection because the encryption and tunneling protocols are used to ensure the confidentiality and integrity of the data in transit.
Incorrect Answers:
A: The main purpose of a screened subnet it to set up a demilitarized zone, not to protect connections over an insecure network.
B: A digital certificate provides identifying information. It is not used to protect connections over an insecure network.
D: Encryption can be used to protect connections over an insecure network, but it cannot protect the integrity.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 701

Section: Security Architecture and Engineering

Explanation/Reference:
Explanation:
2
The first and most important statement of ISC Code of Ethics Canon is to protect society, the common good, necessary public trust and confidence, and the infrastructure.
Incorrect Answers:
2
A: Act honorably, honestly, justly, responsibly, and legally is the second canon of the ISC Code of Ethics and less important that the first canon.
2
B: Advance and protect the profession is the fourth canon of the ISC Code of Ethics and less important that the first canon.
2
D: Provide diligent and competent service to principals is the third canon of the ISC Code of Ethics and less important that the first canon.
References:
https://www.isc2.org/ethics/default.aspx?terms=code of ethics