As a chief information security officer, you are developing an information security strategy. Which of the following should be conducted first? (Wentz QOTD)
A. Conduct a cost-benefit analysis
B. Evaluate return on investment
C. Establish information security policies
D. Identify internal and external influences to the organization

In a Zero Trust environment, subjects receive no implicit or inherent privileges based solely on the network location or asset ownership. Which of the following is the best design to avoid reconnaissance attacks and connect to transportation services? (Wentz QOTD)
A. 802.1X (EAP over LAN)
B. OpenID Connect (OIDC)
C. Single Packet Authorization (SPA)
D. eXtensible Access Control Markup Language (XACML)

Which of the following best describes configuration baselines, procedures, vulnerabilities, and related security contents to streamline patch management processes? (Wentz QOTD)
A. Security Content Automation Protocol (SCAP)
B. Common Vulnerabilities and Exposures (CVE)
C. Open Vulnerability and Assessment Language (OVAL)
D. eXtensible Configuration Checklist Description Format (XCCDF)

An online book retailer accepts orders from their website that turn into SQL statements like INSERT Orders(BookTitle, Price, CustomerId) VALUES (‘Effective CISSP Study Guide’, 59.99, 1001). To enforce security, which of the following controls is impractical and least likely to be implemented? (Wentz QOTD)
A. Acceptable use policy
B. Transaction control
C. Polyinstantiation
D. Address space layout randomization (ASLR)

As a native cloud application developer, you intend to standardize the application programming interface as the contract between clients and backend microservices. Which of the following is the best mechanism? (Wentz QOTD)
A. API Gateway
B. Containerization
C. Representational state transfer (REST)
D. Service mesh

As an auditor, you are conducting an independent information security assessment. Which of the following is the artifact you should review first to assess the effectiveness of controls? (Wentz QOTD)
A. Business case
B. Security controls design
C. Information security policy
D. Statement of applicability of controls

Which of the following sends signals simultaneously over a range of different frequencies as electromagnetic waves? (Wentz QOTD)
A. Symmetrical Digital Subscriber Line (SDSL)
B. Integrated Services Digital Network (ISDN)
C. Fibre Channel over Ethernet
D. 1000BASE-T

You are developing a software solution with a service-oriented architecture. Which of the following is the most critical factor to enforce availability? (Wentz QOTD)
A. Discover and subscribe services from a well-known service registry using UDDI
B. Maintain and completely mediate sessions
C. Invoke services based on standard HTTP verbs
D. Invoke stateless services that follow the single-responsibility principle

After completing the risk assessment against information systems, your organization attempts to mitigate identified risks. Which of the following is least likely implemented? (Wentz QOTD)
A. Setting out information security policy
B. Deploying a signature-based IDS
C. Implementing biometric access control
D. Buying cybersecurity insurance

You are developing an anomaly-based IDS that employs artificial intelligence to categorize intrusion examples into various groups. Which of the following is the most intelligent approach to train the model? (Wentz QOTD)
A. Comprehensive knowledge base
B. Pre-selected features by subject matter experts
C. Ubiquitous deployment of sensors and agents
D. Layers of processing for feature transformation and extraction