What are three assets that might be considered “in scope” for a CMMC Level 1 self-assessment?
Three assets that might be considered "in scope" for a [...]
Why is it important to control access to publicly accessible information systems?
Controlling access to publicly accessible information systems is crucial to [...]
Explain the concept of “least privilege” in access control.
The concept of "least privilege" means that users are only [...]
What is the purpose of a DMZ in network security?
A DMZ (Demilitarized Zone) acts as a buffer zone between [...]
What is the difference between a “vulnerability” and a “flaw” in an information system?
A "flaw" is a general term for any weakness or [...]
Why is it important to update malicious code protection mechanisms regularly?
It is important to update malicious code protection mechanisms regularly [...]
What are three examples of malicious code?
Three examples of malicious code are viruses, spyware, and Trojan [...]
Explain the difference between “sanitizing” and “destroying” media.
Sanitizing media removes information so it cannot be retrieved by [...]
What are the three possible assessment findings for a security requirement objective?
The three possible assessment findings for a security requirement objective [...]
What is the purpose of the CMMC Level 1 self-assessment?
The purpose of the CMMC Level 1 self-assessment is for [...]