Question

What is the CBA for a threat that occurs twice a year at a cost of $1,000 per incident. The resolution is a firewall that is 90% effective and costs $5,000.?

		$3,200
		-$3200
		$14,800
		None of the above

Which is not an exploit mitigation?

	a.	Firewalls & Intrusion detection
	b.	Strong patch management
	c.	Continue defaults
	d.	current access controls

When you are looking for the policies and procedures for Access Controls (AC) where would you look?

		PE-1
		AC-1
		At the beginning of 800-53
		The last control in AC

Answer 1

Please do Like, If you are impressed with the answer

If you have any doubt, you can coimment. I will clarify

Answers:

1) A - $3200

2) C - Continue defaults

3) B - AC-1