A. Corporate policy states that NIPS signatures must be updated every hour.

B. Web-based applications are on isolated network segments.

C. The organization has accepted the risks associated with web-based threats.

D. The attack type does not meet the organization's threat model.

A. Establish a risk matrix

B. Inherit the risk for six months

C. Provide a business justification to avoid the risk

D. Provide a business justification for a risk exception

A. Malicious users will have reduced opportunities for data extractions from their physical thin client workstations, this reducing the effectiveness of local attacks.

B. All thin clients use TPM for core protection, and virtual workstations use vTPM for core protection with both equally ensuring a greater security advantage for a cloud-hosted environment.

C. Thin client workstations require much less security because they lack storage and peripherals that can be easily compromised, and the virtual workstations are protected in the cloud where security is outsourced.

D. Malicious insiders will not have the opportunity to tamper with data at rest and affect the integrity of the system.

A. Have periodic, scheduled reviews to determine which OAuth configuration are set for each media platform.

B. Configure MFA for all users to decrease their reliance on other authentication.

C. Ensue the password being shared is sufficiently and not written down anywhere.

D. Create multiple social media accounts for all marketing user to separate their actions.

A. 작업의 연속성

B. 관리 사슬

C. 변동성 순서

D. 데이터 복구