Which protocol is the BEST option to provide authentication, confidentiality, and data integrity between two applications?
Which of the following is the MOST significant flaw when using Federated Identity Management (FIM)?
An organization implemented a threat modeling program focusing on key assets. However, after a short time it became clear that the organization was having difficulty executing the threat modeling program.
Which approach will MOST likely have been easier to execute?
Typically, rough-cut capacity planning (RCCP) in a job shop environment would review which of the following work centers to determine the ability to execute the plan?
An organization starts to develop a drone inspection and defect detection system includes different subsystems running at different clouds from different service providers. During the architectural design phase, which security architecture principle should be the MOST important for the security engineer to apply?
Which threat modeling methodology is focused on assessing risks from organizational assets?
Which of the following BEST describes web service security conformance testing as it relates to web services security testing?
An independent risk assessment determined that a hospital's existing policies did not have a formal process in place to address system misuse, abuse, or fraudulent activity by internal users. Which of the following would BEST address this deficiency in the Corrective Action Plan?
Which of the following BEST characterizes the operational benefit of using immutable workloads when working on a cloud-based project?
An organization donates used computer equipment to a non-profit group. A system administrator used a degausser on both the magnetic and Solid State Drives (SSD) before delivery. A volunteer at the non-profit group discovered some of the drives still contained readable data and alerted the system administrator. What is the BEST solution to ensure that computer equipment does not contain data before release?
Which of the following measurements indicates there may be bias In the forecast model?
Which of the following is MOST important for an international retail company to consider when handling and retaining information about its customers?
An organization has determined that it needs to retain customer records for at least thirty years to discover generational trends in customer behavior. However, relevant local regulation requires that all Personally Identifiable Information (PII) is deleted after expiration of the customer's engagement with the organization, which is usually no longer than one year. How should the data be handled at the expiration of customer engagement at one year?
When implementing solutions for information security continuous monitoring, which method provides the MOST interoperability between security tools?
TESTED 18 Sep 2025
