What is the primary advantage of using elliptic curve cryptography (ECC) compared to RSA for key exchange? A) ECC requires shorter key lengths for equivalent security strength, reducing computational overhead. B) ECC provides stronger key management features and key lifecycle policies. C) ECC is not vulnerable to brute force attacks due to its unique key structure. D) ECC eliminates the need for digital signatures in key exchange protocols.

When assessing the audit capability of an application, which of the following activities is MOST important? A. Identify procedures to investigate suspicious activity. B. Determine if audit records contain sufficient information. C. Verify if sufficient storage is allocated for audit records. D. Review security plan for actions to be taken in the event of audit failure.

Which of the following security principles ensures that the design of a system limits the potential for failure to minimize the impact on the overall system? A) Fail-safe defaults B) Economy of mechanism C) Separation of privilege D) Open design

In the context of secure system design, what is the primary purpose of implementing a trusted computing base (TCB)? A) To ensure a separation of duties in all operational activities. B) To provide mechanisms for secure communication between network nodes. C) To enforce a consistent and reliable security policy across the system. D) To enable the use of multifactor authentication for system access.

Which of the following has the responsibility of information technology (IT) governance? A. Chief Information Officer (CIO) B. Senior IT Management C. Board of Directors D. Chief Information Security Officer (CISO)