Domain 1

Question 1

• The maximum period of time that a system
  can be unavailable before compromising the achievement of the organization’s business
  objectives

Answer 1

Acceptable interruption window (AIW)

Question 2

The rules, procedures, and practices dealing with operational
effectiveness, efficiency, and adherence to regulations and management policies

Answer 2

Administrative control

Question 3

The total expected loss divided by the number of

years in the forecast period yielding the average annual loss

Answer 3

Annual loss expectancy (ALE) -

Question 4

Description of the fundamental underlying design of the components of
the business system, or of one element of the business system (e.g., technology), the relationships among them, and the manner in which they support the organization’s
objectives

Answer 4

Architecture -

Question 5

The act of verifying the identity (i.e., user, system)

Answer 5

Authentication -

Question 6

Access privileges granted to a user, program, or process, of the act of
granting those privileges

Answer 6

Authorization -

Question 7

Provides an exact image of the original and is a requirement for legally
justifiable forensics

Answer 7

Bit copy -

Question 8

Documentation of the rationale for making a business investment, used
both to support a business decision on whether to proceed with the investment and as
an operational tool to support management of the investment through its full economic
life cycle

Answer 8

Business case -

Question 9

A plan used by an organization to respond to disruption of
critical business processes. Depends on the contingency plan for restoration of critical
systems

Answer 9

Business continuity plan -

Question 10

Evaluating the criticality and sensitivity of information

assets. An exercise that determines the impact of losing the support of any resource to an organization, establishes the escalation of that loss over time, identifies the minimum resources needed to recover, and prioritizes the recovery of processes and supporting
systems. This process also includes addressing: income loss, unexpected expense, legal issues (regulatory compliance or contractual), interdependent processes, and loss of public reputation or public confidence.

Answer 10

Business impact analysis (BIA) -