Explanation/Reference:
Explanation:
The objective of a firewall is to protect a trusted network from an untrusted network; therefore, locations needing firewall implementations would be at the existence of the external connections. All other answers are incomplete or represent internal connections.

Section: Protection of Information Assets
Explanation:
The message digest is calculated and included in a digital signature to prove that the message has not
been altered. It should be the same value as a recalculation performed upon receipt. It does not define the
algorithm or enable the transmission in digital format and has no effect on the identity of the user; it is there
to ensure integrity rather than identity.

Explanation/Reference:
Explanation: Unless controlled, spooling for offline printing may enable additional copies to be printed. Print files are unlikely to be available for online reading by operations. Data on spool files are no easier to amend without authority than any other file. There is usually a lesser threat of unauthorized access to sensitive reports in the event of a system failure.

A policy statement reflects the intent and support provided by executive management for proper security and establishes a starting point for developing the security program.