Which of the following is not a way that you can measure the value of a system when determining if the system requires five nines?

What is the minimum number of nodes required by a failover cluster?

True or False? Risk can be shared or transferred by purchasing insurance.

True or False? A risk assessment is the same as a risk management program.

True or False? A quantitative risk assessment is subjective; the analysis and results are based on opinions more than facts.

True or False? Title I of the Health Insurance Portability and Accountability Act (HIPAA) addresses requirements and standards for information technology.

Which of the following is a law that ensures that federal agencies protect their systems and data, comply with all elements of the law, and integrate security in all processes?

Which of the following is not a risk management step?

What are the two primary methods used to create a risk assessment?

True or False? The second Tuesday of every month is known by attackers of Microsoft systems as Exploit Tuesday.