Explanation/Reference:
Explanation:
Application layer firewall works at the application layer, which is layer 7 in the OSI model.
Incorrect Answers:
B: Application layer firewalls do not work at OSI layer 6, the presentation layer. They are at the Application layer, layer 7.
C: Application layer firewalls do not work at OSI layer 5, the session layer. They are at the Application layer, layer 7.
D: Application layer firewalls do not work at OSI layer 4, the session layer. They are at the Transport layer, layer 7.
References:
https://en.wikipedia.org/wiki/Application_firewall

Answer "Complete loss of power" is a blackout, answer "Momentary high volta " is a spike, and answer "Prolonged high voltage" is a surge.

A Service Organization Control (SOC) 2 report is a general purpose document that proves that an organization's internal controls properly address security, availability, processing integrity, confidentiality or privacy risks. A SOC 2 report is a type of attestation report that provides an independent and objective evaluation of the design and operating effectiveness of the internal controls of a service organization, such as a cloud provider, a data center, or a software-as-a- service provider. A SOC 2 report is based on the Trust Services Criteria, which are a set of standards that define the requirements for security, availability, processing integrity, confidentiality or privacy of the information and systems of a service organization. A SOC 2 report can be used by the service organization's customers, regulators, or other stakeholders to gain assurance and confidence in the service organization's internal controls.

Explanation/Reference:
Explanation:
Blowfish is a block cipher that works on 64-bit blocks of data. The key length can be anywhere from 32 bits up to 448 bits, and the data blocks go through 16 rounds of cryptographic functions. It was intended as a replacement to the aging DES. While many of the other algorithms have been proprietary and thus encumbered by patents or kept as government secrets, this wasn't the case with Blowfish. Bruce Schneier, the creator of Blowfish, has stated, "Blowfish is unpatented, and will remain so in all countries. The algorithm is hereby placed in the public domain, and can be freely used by anyone." Incorrect Answers:
A: RC2 was designed to be a proprietary encryption algorithm.
B: RC4 was designed to be a proprietary encryption algorithm.
D: Skipjack was designed to be a proprietary encryption algorithm.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 810

A continuous information security monitoring program can best reduce risk through encompassing people, process, and technology. A continuous information security monitoring program is a process that involves maintaining the ongoing awareness of the security status, events, and activities of a system or network, by collecting, analyzing, and reporting the security data and information, using various methods and tools. A continuous information security monitoring program can provide several benefits, such as:
Improving the security and risk management of the system or network by identifying and addressing the security weaknesses and gaps Enhancing the security and decision making of the system or network by providing the evidence and information for the security analysis, evaluation, and reporting Increasing the security and improvement of the system or network by providing the feedback and input for the security response, remediation, and optimization Facilitating the compliance and alignment of the system or network with the internal or external requirements and standards A continuous information security monitoring program can best reduce risk through encompassing people, process, and technology, because it can ensure that the continuous information security monitoring program is holistic and comprehensive, and that it covers all the aspects and elements of the system or network security. People, process, and technology are the three pillars of a continuous information security monitoring program, and they represent the following:
People: the human resources that are involved in the continuous information security monitoring program, such as the security analysts, the system administrators, the management, and the users. People are responsible for defining the security objectives and requirements, implementing and operating the security tools and controls, and monitoring and responding to the security events and incidents.
Process: the procedures and policies that are followed in the continuous information security monitoring program, such as the security standards and guidelines, the security roles and responsibilities, the security workflows and tasks, and the security metrics and indicators.
Process is responsible for establishing and maintaining the security governance and compliance, ensuring the security consistency and efficiency, and measuring and evaluating the security performance and effectiveness.
Technology: the tools and systems that are used in the continuous information security monitoring program, such as the security sensors and agents, the security loggers and collectors, the security analyzers and correlators, and the security dashboards and reports. Technology is responsible for supporting and enabling the security functions and capabilities, providing the security visibility and awareness, and delivering the security data and information.