True or False? PCI DSS is a standard for the payment card industry, not a law.

True or False? Every control must meet all three primary objectives of controls: prevent, detect, and recover.

How does a computer incident response team (CIRT) plan mitigate an organization’s risk?

Complete the equation for the relationship between risk, vulnerabilities, and threats: Risk equals:

True or False? During a business impact analysis (BIA), the highest priorities are assigned based on the shortest maximum acceptable outages (MAOs).

In most cases, should a computer incident response team (CIRT) plan include pursuing the attacker?

True or False? An uninterruptible power supply (UPS) provides power for a short amount of time during a power failure.

True or False? Firewalls are not an effective tool for determining whether users are violating policies.

System logs and audit trails are a type of __________ control.

True or False? An MAO identifies the maximum acceptable downtime for an organization.