AllExam Dumps

DUMPS, FREE DUMPS, VCP5 DUMPS| VMWARE DUMPS, VCP DUMPS, VCP4 DUMPS, VCAP DUMPS, VCDX DUMPS, CISCO DUMPS, CCNA, CCNA DUMPS, CCNP DUMPS, CCIE DUMPS, ITIL, EXIN DUMPS,


READ Free Dumps For
Warning: Undefined variable $vendor in /home1/bandbozu/getfreedumps.com/quiz.php on line 141
-
Warning: Undefined variable $exam_number in /home1/bandbozu/getfreedumps.com/quiz.php on line 141





Question ID 16810

When a security standard conflicts with a business objective, the situation should be
resolved by:

Option A

changing the security standard.

Option B

 changing the business objective.

Option C

 performing a risk analysis.

Option D

 authorizing a risk acceptance.

Correct Answer C
Explanation Explanation: Conflicts of this type should be based on a risk analysis of the costs and benefits of allowing or disallowing an exception to the standard. It is highly improbable that a business objective could be changed to accommodate a security standard, while risk acceptance* is a process that derives from the risk analysis.


Question ID 16811

Minimum standards for securing the technical infrastructure should be defined in a security:

Option A

strategy.

Option B

guidelines.

Option C

model.

Option D

architecture.

Correct Answer D
Explanation Explanation: Minimum standards for securing the technical infrastructure should be defined in a security architecture document. This document defines how components are secured and the security services that should be in place. A strategy is a broad, high-level document. A guideline is advisory in nature, while a security model shows the relationships between components.

Send email to admin@getfreedumps for new dumps request!!!