After a periodic security assessment, you are reviewing the plan of action and milestones (POA&M) to correct non-compliance issues and mitigate risk. As a CISO, which of the following is your most concern?
A. Tasks not assigned an owner
B. Tasks underestimated on purpose
C. Tasks marked for further evaluation
D. Tasks solved and inherited from the previous report

The software testing team is testing a web-based E-Commerce system. The back-end API receives an HTTP request, GET /customer/delete?country=all, with an empty HTTP message body. Which of the following is the most likely test undergoing?
A. Fuzz testing
B. Stress testing
C. Synthetic transaction
D. Misuse/Abuse testing

Which of the following tests is least appropriate to be automated?
A. Fuzz testing
B. User interface testing
C. Fagan inspection
D. Code review

Which of the following can best enforce the referential integrity of the relational database?
A. Primary key
B. Foreign key
C. Candidate key
D. View

Which of the following block cipher modes of operation in which a block cipher doesn’t use plaintext as the direct input but operates on its output and the plaintext to produce the ciphertext?
A. Cipher Block Chaining (CBC)
B. Cipher feedback (CFB)
C. Electronic codebook (ECB)
D. Initialization Vector (IV)

You are learning cryptography. Which of the following is correct?
A. Secret-key encryption uses a shorter key than public-key encryption to achieve a lower work factor.
B. The CBC mode of public-key encryption hides ciphertext patterns, while ECB doesn’t.
C. Block ciphers have better performance than stream ciphers on constrained hardware.
D. Stream ciphers are more vulnerable to cryptanalytic attacks than block ciphers.