Sample questions

Q1. Which one of the following is not a security testing control?

1. Vulnerability assessment
2. Penetration testing
3. Departmental tests
4. Denial of Service Tests

Q2. Access is controlled through a retina scanner for the identification, authentication, and authorization of operators to a data center. A legitimate user was erroneously denied access during a scan. Such errors can be categorized under which one of the following?

1. False negative
2. False positive
3. False rating
4. True negative

Q3. The effectiveness of a security control is a measure for which one of the following?

1. Expected outcome of a control action
2. Efficient process
3. Security policy
4. Security procedure

Q4. The collection of security process, test data, and reporting is used to verify what?

1. Security controls are documented
2. Employee awareness about security controls
3. Avoid social engineering attacks
4. Security policies and procedures are continuously and uniformly applied

Q5. Third-party audits are conducted for what?

1. Independent review of security
2. Internal...