A. Evaluate available open source threat intelligence pertaining to the vendor and their product.

B. Document a risk acceptance, in accordance with internal risk management procedures, that will allow the product to go-live.

C. Gain assurance on the vendor ' s security controls by examining independent audit reports and any relevant certifications the vendor can provide.

D. Shift the negative impact of the risk to a cyber insurance provider, i.e., risk transference.

A. Digital verification

B. Bring Your Own Device (BYOD)

C. Man-in-the-Middle (MITM)

D. Token-based authentication

A. It uses uniform performance measures.

B. Each warehouse makes its own replenishment decisions.

C. It uses fair-share allocation.

D. It uses distribution requirements planning(DRP).

A. the decomposition of customer return rates with seasonality.

B. differences in the performance of employees.

C. the proper level of service for a customer segment.

D. the source of a quality-of-service issue.

A. Provides security when users traverse public networks such as the Internet

B. Provides stateless and stateful inspection of incoming and outgoing network traffic

C. Ensures incoming and outgoing packets are inspected before they are allowed to pass through

D. Offers features such as integrated intrusion prevention or application awareness and control

A. Define the Acceptable Use Policy (AUP) for administrators.

B. Have administrators sign appropriate access agreements.

C. Perform extensive background checks on administrators.

D. Have administrators accept a Non-Disclosure Agreement.

A. Configure internal firewalls to accept and pass all scanner traffic and responses

B. Obtain support from the computing systems ' stakeholders

C. Select two different vulnerability scanners to get comprehensive reporting

D. Execute a vulnerability scan to determine the current organization security posture

A. Purchase the software, deploy it in a test environment, and perform Dynamic Application Security Testing (DAST) on the software.

B. Request a software demo with permission to have a third-party penetration test completed on it.

C. Request a copy of the most recent System and Organization Controls (SOC) report and/or most recent security audit reports and any vulnerability scans of the software code from the vendor.

D. Ask the development team to reevaluate the current program and have a toolset developed securely within the organization.

A. Security assessment report

B. Recovery time objectives

C. Plan of action and milestones

D. Disaster Recovery Plans (DRP)

A. Calculate the effort of implementing effective countermeasures.

B. Calculate the cost of implementing effective countermeasures.

C. Eliminate the risk of most threats.

D. Identify countermeasures.

A. The potential for unauthorized access to user attributes

B. The potential for tracking and profiling an individual ' s transactions

C. The potential to break the chain of trust between identity brokers

D. The potential for exposing an organization ' s sensitive business information

A. A structured risk management process

B. A common language and methodology

C. A structured cybersecurity program

D. A common set of security capabilities

A. Performing a Cross-Site Scripting (XSS) attack

B. Creating a Denial-Of-Service (DoS) condition

C. Adding administrator rights on servers

D. Opening of previously closed ports

A. Information Technology Infrastructure Library (ITIL)

B. International Organization For Standardization (ISO) 27001

C. Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM)

D. Control Objectives For Information And Related Technologies (COBIT)

A. Dissemination, review, revocation

B. Dissemination, rotation, revocation

C. Provisioning, review, revocation

D. Provisioning, Dissemination, revocation