While the purpose of systems in the DMZ is to allow public access to certain internal network resources (EMAIL, DNS, Web), it is a good practice to restrict that access to the minimum necessary to provide those services through use of a firewall. In computer security, a DMZ or Demilitarized Zone (sometimes referred to as a perimeter network) is a physical or logical subnetwork that contains and exposes an organization's external-facing services to a larger and untrusted network, usually the Internet. The purpose of a DMZ is to add an additional layer of security to an organization's local area network (LAN); an external attacker only has direct access to equipment in the DMZ, rather than any other part of the network. The name is derived from the term "demilitarized zone", an area between nation states in which military operation is not permitted.
The following are incorrect answers: "Right in front of your first Internet facing firewall" While the purpose of systems in the DMZ is to allow public access to certain internal network resources (EMAIL, DNS, Web), it is a good practice to restrict that access to the minimum necessary to provide those services through use of a firewall.
"Right behind your first network active firewall" This is an almost-right-sounding answer meant to distract the unwary.
"Right behind your first network passive Internet http firewall" This is an almost-right-sounding answer meant to distract the unwary.
References: CBK, p. 434 and AIO3, p. 483 and http://en.wikipedia.org/wiki/DMZ_%28computing%29

The answer: The
chain of custody of the evidence must show who collected,
secured, controlled, handled, and transported the evidence, and that it was not tampered with.
It has to be material, relevant and reliable, and the chain of custody must be maintained, it is
unlikely that it will be admissible in court if it has been tampered with.
The following answers are incorrect:
It must prove a fact that is immaterial to the case. Is incorrect because evidence must be relevant.
If it is immaterial then it is not relevant.
Its reliability must be proven. Is incorrect because it is not the best answer. While evidence must
be relevant if the chain of custody cannot be verified, then the evidence could lose it's credibility
because there is no proof that the evidence was not tampered with. So, the correct answer above
is the BEST answer.
The process for producing it must be documented and repeatable. Is incorrect because just
because the process is documented and repeatable does not mean that it will be the same. This
amounts to Corroborative Evidence that may help to support a case.

RAID Level 0 creates one large disk by using several disks. This process is called striping. Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 65.

The correct answer is "Altering elements of the enterprise in response to a risk analysis". Answer "Removing all risk to the enterprise at any cost" is not possible or desirable, "Assigning any costs associated with risk to a third party" is risk transference, and "Assuming all costs associated with the risk internally" is risk acceptance.