2 cissp ® Official Study Guide Eighth Edition

733
6.
Which of the following is one of the primary reasons an organization enforces a mandatory 
vacation policy?
A.
To rotate job responsibilities
B.
To detect fraud
C.
To increase employee productivity
D.
To reduce employee stress levels
7.
An organization wants to reduce vulnerabilities against fraud from malicious employees. Of 
the following choices, what would help with this goal? (Choose all that apply.)
A.
Job rotation
B.
Separation of duties
C.
Mandatory vacations
D.
Baselining
8.
Of the following choices, what is 
not
a valid security practice related to special privileges?
A.
Monitor special privilege assignments.
B.
Grant access equally to administrators and operators.
C.
Monitor special privilege usage.
D.
Grant access to only trusted employees.
9.
Which of the following identifies vendor responsibilities and can include monetary penalties 
if the vendor doesn’t meet the stated responsibilities?
A.
Service-level agreement (SLA)
B.
Memorandum of understanding (MOU)
C.
Interconnection security agreement (ISA)
D.
Software as a service (SaaS)
10.
What should be done with equipment that is at the end of its lifecycle and is being donated 
to a charity?
A.
Remove all CDs and DVDs.
B.
Remove all software licenses.
C.
Sanitize it.
D.
Install the original software.
11.
An organization is planning the layout of a new building that will house a datacenter. 
Where is the most appropriate place to locate the datacenter?