Explanation/Reference:
Explanation:
Bind variables placeholders for literal values in a Structured Query Language (SQL) query being sent to the database on a server. The SQL statement is sent to the server for parsing and the later values are bound to the placeholders and sent separately to the server. This separate step is the origin of the term
'bind variable'.
Incorrect Answers:
B: An assimilation value is not the correct term for a value that can be bound to a placeholder declared within an SQL statement.
C: A reduction value is not the correct term for a value that can be bound to a placeholder declared within an SQL statement.
D: A resolution value is not the correct term for a value that can be bound to a placeholder declared within an SQL statement.
References:
Krutz, Ronald L. and Russell Dean Vines, The CISSP Prep Guide: Mastering the CISSP and ISSEP Exams, 2nd Edition, Wiley Publishing, Indianapolis, 2004, p. 84

The hash function generates a message digest. The message digest is encrypted with the private key of the sender. Thus, if the message can be opened with the sender's public key that is known to all, the message must have come from the sender. The message is not encrypted with the public key because the message is usually longer than the message digest and would take more computing resources to encrypt and decrypt. Because the message digest uniquely characterizes the message, it can be used to verify the identity of the sender.
Answers "The message digest is encrypted in the public key of the sender" and "The message is encrypted in the public key of the sender" will not work because a message encrypted in the public key of the sender can only be read by using the private key of the sender. Because the sender is the only one who knows this key, no one else can read the message. Answer "The message is encrypted in the private key of the sender" is incorrect because the message is not encrypted, but the message digest is encrypted.

Explanation/Reference:
Explanation:
A zero-day is an undisclosed computer application vulnerability that could be misused to harmfully affect the computer programs, data, additional computers or a network.
Incorrect Answers:
B: An exploit refers to a piece of software or data, or a sequence of commands that takes advantage of a bug or vulnerability with the aim of causing unplanned or unexpected behavior to take place on computerized hardware, or its software.
C: A vulnerability is a weakness which allows an attacker to reduce a system's information assurance.
D: Software cracking is the modification of software to get rid of or deactivate features that are considered undesirable by the person cracking the software.
References:
https://en.wikipedia.org/wiki/Zero_day_attack
https://en.wikipedia.org/wiki/Exploit_%28computer_security%29
https://en.wikipedia.org/wiki/Vulnerability_(computing)
https://en.wikipedia.org/wiki/Software_cracking

The answer is a personnel control. Most support and operations
staff have special access to the system. Some organizations conduct
background checks on individuals filling these positions to screen
out possibly untrustworthy individuals.
*Answer "Sanitizing the media before disposition": The process of removing information from media before disposition is called sanitization. Three techniques are commonly used
for media sanitization: overwriting, degaussing, and destruction.
*Answer "Printing to a printer in a secured room": It may be necessary to actually output data to the media in a secure location, such as printing to a printer in a locked room
instead of to a general-purpose printer in a common area.
*Answer "Physically protecting copies of backup media": Physical protection of copies of backup media stored offsite should be accorded a level of protection equivalent to media
containing the same information stored onsite.
Source: National Institute of Standards and Technology, An Introduction to Computer Security: The NIST Handbook Special Publication 800-12.

Explanation/Reference:
Explanation:
Authenticity is not a factor related to Access Control.
Access controls are security features that control how users and systems communicate and interact with other systems and resources.
Access controls give organization the ability to control, restrict, monitor, and protect resource availability, integrity and confidentiality.
Incorrect Answers:
A: Integrity is a factor related to Access Control.
C: Confidentiality is a factor related to Access Control.
D: Availability is a factor related to Access Control.
References:
https://en.wikibooks.org/wiki/Fundamentals_of_Information_Systems_Security/Access_Control_Systems