A. log auditing.

B. code reviews.

C. impact assessments.

D. static analysis.

A. clear-text attack.

B. known cipher attack.

C. frequency analysis.

D. stochastic assessment.

A. Client privilege administration is inherently weaker than server privilege administration.

B. Client hardening and management is easier on clients than on servers.

C. Client-based attacks are more common and easier to exploit than server and network based attacks.

D. Client-based attacks have higher financial impact.

A. Application interface entry and endpoints

B. The likelihood and impact of a vulnerability

C. Countermeasures and mitigations for vulnerabilities

D. A data flow diagram for the application and attack surface analysis

A. It provides for proper prioritization and scheduling of security and maintenance tasks.

B. It reduces critical system support workload and reduces the time required to apply patches.

C. It allows for clear systems status communications to executive management.

D. It provides for easier determination of ownership, reducing confusion as to the status of the asset.

A. To assign responsibility for mitigating the risk to vulnerable systems

B. To ensure that information assets receive an appropriate level of protection

C. To recognize that the value of any item of information may change over time

D. To recognize the optimal number of classification categories and the benefits to be gained from their use