True or False? Mobile code is a type of malware that executes when a user visits a website or opens an email.

True or False? One way to identify controls is to identify critical business functions and critical business operations.

Which of the following is not a step in the process of hardening a server?

What should you do if you discover that a security gap has not been closed?

Which of the following is an indirect objective of a business impact analysis (BIA)?

True or False? The maximum age of a password policy identifies when the password must be changed.

Your team is developing a business impact analysis (BIA). You have identified the critical business functions (CBFs) and associated processes. What should you do next?

What is the primary tool used to ensure countermeasures are implemented?

Which of the following is not a best practice when performing a business impact analysis (BIA)?

True or False? The overall cost of a countermeasure can include training costs.