The following answers are incorrect:
Transport layer: The Transport layer handles computer-to computer communications, rather than
application-to-application communications like RPC.
Data link Layer: The Data Link layer protocols can be divided into either Logical Link Control (LLC)
or Media Access Control (MAC) sublayers. Protocols like SLIP, PPP, RARP and L2TP are at this
layer. An application-to-application protocol like RPC would not be addressed at this layer.
Network layer: The Network Layer is mostly concerned with routing and addressing of information,
not application-to-application communication calls such as an RPC call.
The following reference(s) were/was used to create this question:
The Remote Procedure Call (RPC) protocol is implemented at the Session layer, which
establishes, maintains and manages sessions as well as synchronization of the data flow.
Source: Jason Robinett's CISSP Cram Sheet: domain2.
Source: Shon Harris AIO v3 pg. 423

Explanation/Reference:
Explanation:
DES makes use of a 64-bit key, of which 56 bits represents the true key, and the remaining 8 bits are used for parity.
Incorrect Answers:
B: DES does make use of a 64-bit key, but the effective key size is 56 bits.
C: International Data Encryption Algorithm (IDEA) produces key that is 128 bits long.
D: RC5 support variable-length key sizes ranging from 0-2040.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, pp. 800, 809, 810

Application control provides a transparent feeling to endpoint applications when changes are needed, this is one of the features of it. With application control you can audit certain use of the applications involved and only specify record of your choice. There is also the possibility to limit the end users applications to provide access to only certain screens. Check your CISSP documentation about Application Control.

The correct answer is "The percentage of loss that a realized threat event would have on a specific asset". Answer "Adollar figure that is assigned to a single event" is an SLE,
"Anumber that represents the estimated frequency of the occurrence of
an expected threat" is an ARO, and "The annual expected financial loss to an organization from a threat" is an ALE.