One of the security framework’s purposes is to guide the selection of controls based on security requirements to secure information systems. Which of the following is correct about security frameworks? (Wentz QOTD)
A. A framework sets the standard for organizations to follow
B. A framework should be as exhaustive as possible
C. A framework may lead to mandatory practices
D. Various frameworks should not be adopted simultaneously

You are evaluating cloud service models that support microservices architecture and have minimum administration overhead to deploy an enterprise-grade application. Which of the following is the best technology that meets your requirements? (Wentz QOTD)
A. PaaS
B. Zero Trust
C. Containerization
D. Serverless computing

A central processing unit (CPU) typically provides various addressing modes that identify the operand(s) of each instruction. Which of the following addressing modes specifies the operand in the instruction itself? (Wentz QOTD)
A. Register addressing
B. Direct addressing
C. Indirect addressing
D. Immediate addressing

You are implementing network access control using 802.1X. Which of the following is the protocol with the least system administration overhead for supplicants to authenticate to the authenticator? (Wentz QOTD)
A. EAP-TLS
B. PEAP
C. Kerberos
D. Radius

You are preparing the annual plan for the coming year. Which of the following is not a smart goal-setting principle? (Wentz QOTD)
A. Developing a comprehensive target
B. Assigning a specific deadline
C. Allocating resources
D. Defining measurable indicators

Alice wants to send a contract with a digital signature that enforces nonrepudiation to Bob. Which of the following best describes the process of generating the digital signature? (Wentz QOTD)
A. Generate a message authentication code of the contract using SHA
B. Generate the contract digest encrypted by Bob’s public key
C. Encrypt the hash value of the contract using Alice’s private key
D. Produce a ciphertext of the contract digest using a secret key agreed by Diffie-Hellman

As a security professional, you have to ensure the effectiveness of information security and comply with requirements such as laws, regulations, industrial standards, contracts, organizational policies, code of ethics, etc. Which of the following should you follow when compliance requirements are not consistent? (Wentz QOTD)
A. Laws
B. Regulations
C. Industry standard
D. Organizational policies

The board of directors is discussing the organization of security function and its relation with the audit function. Which of the following is the most accepted practice? (Wentz QOTD)
A. The security function should comprise internal audits
B. The audit function should include the security function
C. The audit committee shall govern the security function
D. The security function may be managed by engineers or other staff

When implementing the wireless network, you gave up WEP and turned to WPA2 because WEP has been cracked. Which of the following best describes your risk treatment or response strategy? (Wentz QOTD)
A. Eliminate
B. Transfer
C. Modify
D. Avoid