Your company implemented a biometric system that matches fingerprints against the model database to control access to the computer room. An IT engineer is authorized to enter the computer room by the management but rejected by the system. Which of the following best describes the error? (Wentz QOTD)
A. False negative
B. False positive
C. Type I error
D. Type II error

Which of the following software testing techniques is most commonly conducted by developers or programmers? (Wentz QOTD)
A. Synthetic transactions
B. Fuzzing
C. Continuous integration
D. Unit testing

You are learning about risk management. Which of the following provides the most general concept of risk and applies to the most comprehensive contexts? (Wentz QOTD)
A. NIST Generic Risk Model
B. NIST Risk Management Framework
C. ISO 31000
D. ISO 27005

You are connecting a legacy IPX/SPX network to an IP network. Which of the following is the most appropriate device? (Wentz QOTD)
A. Brouter
B. Gateway
C. Layer 3 switch
D. Next-generation firewall

Your organization plans to establish a dedicated department for the security function. Which of the following is the consideration of least importance? (Wentz QOTD)
A. Legal and regulatory requirements
B. The boundary of security and IT operations
C. Customer’s needs and requirements
D. Security and privacy security controls selection

Your organization’s top management requires data classified at a higher security level shall not flow to a subject with a lower level clearance, and classified data shall not be sent to anyone who doesn’t need to know in terms of their duty. Which of the following should be considered first to meet the policy requirements? (Wentz QOTD)
A. A management system aligned with the policy
B. A system based on state machine and information flow
C. An information system that supports the access control matrix
D. A lattice-based model that enforces mandatory access control

Your company implements a website and sells products online. A frequent customer is logging into the system. Which of the following authentication schemes is least likely to be implemented to validate the username and password against the directory that encrypts and stores all customer’s passwords? (Wentz QOTD)
A. Claim-based
B. Cleartext-based
C. Ciphertext-based
D. Checksum-based

Which of the following governance-level committees least commonly belongs to the board of directors? (Wentz QOTD)
A. Audit Committee
B. Business Continuity Committee
C. Remuneration Committee
D. Nomination Committee

Which of the following cryptographic algorithms can ensure confidentiality with the shortest key length? (Wentz QOTD)
A. Factoring modulus
B. RSA Public key encryption
C. Elliptic curve
D. Hash