QUESTION: 166 DRAG DROP

Drag and drop the appropriate external constructs in front of their respective functions.

The Answer is Exhibit B.

Answer(s): A

Explanation:

There are two types of compositional constructs: 1.External constructs: The various types of external constructs are as follows: Cascading: In this type of external construct, one system gains the input from the output of another system. Feedback: In this type of external construct, one system provides the input to another system, which in turn feeds back to the input of the first system. Hookup: In this type of external construct, one system communicates with another system as well as with external entities. 2.Internal constructs: The internal constructs include intersection, union, and difference.

Reveal Solution Next Question

QUESTION: 167

Which of the following are the primary functions of configuration management?
Each correct answer represents a complete solution. Choose all that apply.

It removes the risk event entirely by adding additional steps to avoid the event.
It ensures that the change is implemented in a sequential manner through formalized testing.
It reduces the negative impact that the change might have had on the computing services and resources.
It analyzes the effect of the change that is implemented on the system.

Answer(s): B,C,D

Explanation:

The primary functions of configuration management are as follows: It ensures that the change is implemented in a sequential manner through formalized testing. It ensures that the user base is informed of the future change. It analyzes the effect of the change that is implemented on the system. It reduces the negative impact that the change might have had on the computing services and resources. Answer A is incorrect. It is not one of the primary functions of configuration management. It is the function of risk avoidance.

Reveal Solution Next Question

QUESTION: 168

Which of the following are included in Technical Controls? Each correct answer represents a complete solution. Choose all that apply.

Identification and authentication methods
Configuration of the infrastructure
Password and resource management
Implementing and maintaining access control mechanisms
Security devices
Conducting security-awareness training

Answer(s): A,B,C,D,E

Explanation:

Technical Controls are also known as Logical Controls. These controls include the following: Implementing and maintaining access control mechanisms Password and resource management Identification and authentication methods Security devices Configuration of the infrastructure Answer F is incorrect. It is a part of Administrative Controls.

Reveal Solution Next Question

QUESTION: 169

What are the various phases of the Software Assurance Acquisition process according to the U.S. Department of Defense (DoD) and Department of Homeland Security (DHS) Acquisition and Outsourcing Working Group?

Implementing, contracting, auditing, monitoring
Requirements, planning, monitoring, auditing
Planning, contracting, monitoring and acceptance, follow-on
Designing, implementing, contracting, monitoring

Answer(s): C

Explanation:

Software Assurance Acquisition process defines the level of confidence that software is free from vulnerabilities. It is designed into the software or accidentally inserted at anytime during its lifecycle, and the software works in a planned manner. According to the U.S. Department of Defense and Department of Homeland Security Acquisition and Outsourcing Working Group, the Software Assurance Acquisition process contains the following phases: 1.Planning 2.Contracting 3.Monitoring and acceptance 4.Follow-on

Reveal Solution Next Question

Free CSSLP Exam Braindumps (page: 41)

QUESTION: 166 DRAG DROP

Explanation:

QUESTION: 167

Explanation:

QUESTION: 168

Explanation:

QUESTION: 169

Explanation: