Explanation/Reference:
Explanation:
Regression testing means that after a change to a system takes place, you retest to ensure functionality, performance, and protection.
Incorrect Answers:
A: With Unit testing, you test an individual component in a controlled environment where programmers validate data structure, logic, and boundary conditions.
B: Pilot testing involves having a group of end users try the system prior to its full deployment in order to give feedback on its performance.
D: Parallel Testing is performed when the organization is moving from one system to another. It is the process of performing workflows in the legacy system and the new system to assure that the processes will lead to the same result.
References:
Conrad, Eric, Seth Misenar and Joshua Feldman, CISSP Study Guide, 2nd Edition, Syngress, Waltham,
2012, p. 1105

Explanation/Reference:
Explanation:
C2: Controlled Access Protection: Users need to be identified individually to provide more precise access control and auditing functionality. Logical access control mechanisms are used to enforce authentication and the uniqueness of each individual's identification. Security-relevant events are audited, and these records must be protected from unauthorized modification. The architecture must provide resource, or object, isolation so proper protection can be applied to the resource and any actions taken upon it can be properly audited. The object reuse concept must also be invoked, meaning that any medium holding data must not contain any remnants of information after it is released for another subject to use. If a subject uses a segment of memory, that memory space must not hold any information after the subject is done using it. The same is true for storage media, objects being populated, and temporary files being created-all data must be efficiently erased once the subject is done with that medium.
Incorrect Answers:
A: Object reuse protection is not required at level C1.
C: Object reuse protection is required at level B1; however, it was introduced at level C2.
D: Object reuse protection is required at level B2; however, it was introduced at level C2.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, pp. 392-395

A transponder is a proximity identification device that does not require action by the user.
The reader transmits signals to the device and the device responds with an access code.
These transponder devices contain a radio receiver and transmitter, a storage place for the access code, control logic, and a battery.
A passive device only uses the power from the reader to detect the presence of the card.
Card swipes and smart cards are not proximity identification devices.
Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-
Hill/Osborne, 2002, chapter 6: Physical Security (page 323).

Another factor that must be taken into account when determining the necessary FAR and FRR for your organization is the actual quality of the fingerprints in your user population. ABC's experience with several thousand users, and the experience of its customers, indicates that a percentage of the populations do not have fingerprints of sufficient quality to allow for authentication of the individual. Approximately 2.5% of employees fall into this group in the general office worker population. For these users, a smart card token with password authentication is recommended.

The key words are legal proceedings and trial practice. Information
and property obtained in the investigation by law enforcement
officials must be turned over to the defense. For some information
that is proprietary to an organization, restrictions can be placed on
who has access to the data. The other answers are forms of the
investigative process. During an investigation, answers "The process undertaken by the investigators to acquire evidence needed for prosecution of a case" and "A step in the computer forensic process" are appropriate definitions of discovery.