Question 342 out of 2 points the window of is the

 Question 34
2 out of 2 points
The window of ________________ is the time between when an opportunity
for risk is identified and when the risk is ultimately eliminated by a patch.
 Question 35
2 out of 2 points
One of the six specifications for entities that implement SCAP is to provide
particular names for operation systems, applications, and hardware. This
specification articulates a standard naming convention for systems to
promote consistency across varied products. Which of the following
specifications fits this description?
 Question 36
2 out of 2 points
There are several different best practices available for implementation
when creating a plan for IT security policy compliance monitoring. One
such practice is to design a baseline derived from the security policy,
which entails _________________.

 Question 37
2 out of 2 points
It is important that ___________________ accounts have full and
unencumbered rights to restore data as well as to configure, install, repair,
and recover applications and networks.
 Question 38
2 out of 2 points
In order to establish cogent expectations for what’s acceptable behavior
for those utilizing an organization’s technology asset, an Acceptable Use
Policy (AUP) defines the targeted functions of computers and networks.
This policy delimits unacceptable uses and the consequences for policy
violation. Which of the following topics is not likely to be found in an AUP?
 Question 39
2 out of 2 points
Which of the following statements does not offer an explanation of what
motivates an insider to pose a security risk?

 Question 40
2 out of 2 points
When is the best time to implement security policies to help developers
diminish the number of vulnerabilities during application development?