312-50v8

312-50v8 practice questions, page 7 of 14, with answer review and explanations.

Question 31

If the final set of security controls does not eliminate all risk in a system, what could be done next?

  1. Continue to apply controls until there is zero risk.
  2. Ignore any remaining risk.
  3. If the residual risk is low enough, it can be accepted.
  4. Remove current controls since they are not completely effective.

Question 32

What is one thing a tester can do to ensure that the software is trusted and is not changing or tampering with critical data on the back end of a system it is loaded on?

  1. Proper testing
  2. Secure coding principles
  3. Systems security and architecture review
  4. Analysis of interrupts within the software

Question 33

Which of the following examples best represents a logical or technical control?

  1. Security tokens
  2. Heating and air conditioning
  3. Smoke and fire alarms
  4. Corporate security policy

Question 34

Which type of access control is used on a router or firewall to limit network activity?

  1. Mandatory
  2. Discretionary
  3. Rule-based
  4. Role-based

Question 35

At a Windows Server command prompt, which command could be used to list the running services?

  1. Sc query type= running
  2. Sc query \\servername
  3. Sc query
  4. Sc config