Online Access Free 156-110 Exam Questions

Organizations _______ risk, when they convince another entity to assume the risk for them.

• A.Mitigate
• B.Transfer
• C.Assume
• D.Elevate
• E.Deny

Which type of Business Continuity Plan (BCP) test involves practicing aspects of the BCP, without actually interrupting operations or bringing an alternate site on-line?

• A.Simulation
• B.Checklist
• C.Parallel
• D.Full interruption
• E.Structured walkthrough

_______ is a method of tricking users into revealing passwords, or other sensitive information.

• A.Risk
• B.Dumpster diving
• C.Social engineering
• D.Means testing
• E.Exposure

Which of the following is likely in a small-business environment?

• A.Resources are available as needed.
• B.Most employees have experience with information security.
• C.Small businesses have security personnel on staff.
• D.Security budgets are very small.
• E.Most small businesses employ a full-time information-technology staff.

Which of the following represents a valid reason for testing a patch on a nonproduction system, before applying it to a production system?

• A.Patches always overwrite user data.
• B.Only patches on vendor-pressed CDs can be trusted.
• C.Patches are a kind of virus.
• D.Patches usually break important system functionality.
• E.Patches may re-enable services previously disabled.