1 True or False? A mitigating control limits the damage caused by not having a control in place. True False 0.3 points QUESTION 2 True or False? A preventive control limits the impact to the business by correcting a vulnerability. True False 0.3 points QUESTION 3 True or False? As an organization matures, so does its business model. True False 0.3 points QUESTION 4 In order to convince an organization to adopt security policies, it is necessary for a manager to have some proficiency in __________, which refers to certain social personality traits such as the ability to communicate and project optimism. A. soft skills B. empathy C. motivation D. tone at the top 0.3 points QUESTION 5 True or False? The term "apathy" refers to indifference and lack of motivation. True False 0.3 points QUESTION 6 Remote access is a concern because the person is coming from a public network. For stronger security, many organizations require two-factor authentication for remote access. Which of the following is not one of the commonly accepted types of authentication credentials? A. Something you know B. Something you want to know C. Something you are D. Something you have 0.3 points QUESTION 7 True or False? A law that requires any type of information protection also requires proper security controls. True False 0.3 points QUESTION 8 True or False? The process of authentication, in which an identity is verified, explicitly applies to human users. True False 0.3 points QUESTION 9 True or False? No circumstances should allow for operational deviation from security policies. True False 0.3 points QUESTION 10 The difference between a flat and hierarchical organization is relative to its __________ and _________. A. size, business model B. risk appetite, culture C. division of labor, executive management support D. security policies, human resources policies