b. An attack that uses unpatched vulnerabilities A "Zero Day Attack" refers to an attack that takes advantage of a software vulnerability that is unknown to the vendor and has not been patched, meaning there are "zero days" of protection against it.

In the DREAD model, 'R' stands for **Recovery**. The DREAD model is used for risk assessment in security and the components represent different aspects of risks associated with potential vulnerabilities.

c. Information Systems Auditor An Information Systems Auditor evaluates whether systems meet regulatory requirements.

The 'Recovery' control function is primarily focused on restoring services post-incident. Therefore, the correct answer is: b. Restore services post-incident

The method commonly used to evaluate training effectiveness is the **b. Kirkpatrick Model**. This model assesses training programs through four levels: Reaction, Learning, Behavior, and Results.

b. Copyright Copyright law protects original creative works, such as literature, music, art, and software.

The document that outlines the step-by-step security process is **c. Procedure**. Procedures typically provide detailed instructions on how to implement policies and standards in a specific and actionable manner.

The main focus of a 'Security Assessment' is **c. Determining effectiveness of security controls**. Security assessments are conducted to evaluate the strength and effectiveness of an organization's security measures and identify any vulnerabilities or weaknesses in their systems.

The term that defines a legal obligation to act responsibly is **a. Due Diligence**.

c. Click-through Click-through licenses are commonly displayed during software installation, requiring the user to agree to the terms by clicking an "I Agree" button.

The function of a Business Impact Analysis (BIA) is primarily to **b. Identify critical processes and potential disruptions**. A BIA helps organizations understand the effects of interruptions to their business operations and assesses the impact of various risks and disruptions on critical business functions. It is a key component of business continuity planning.

The term 'Safe Harbor' in compliance refers to **b. Legal practices to avoid penalties**. It generally refers to provisions that protect individuals or organizations from legal liability or penalties under certain conditions, often by demonstrating compliance with specific regulations or standards.

c. Determining the level of protection required Asset classification helps organizations identify and categorize assets based on their importance and sensitivity, which in turn aids in determining the appropriate level of protection and security measures needed for those assets.

The term that best defines unauthorized access to systems or data is **a. Exposure**. However, in a more specific context, unauthorized access can also be described using terms related to security breaches, but from the given options, "exposure" is the closest fit. - **Authentication** refers to verifying the identity of a user or system. - **Access Control** pertains to the policies that restrict who can access certain resources. - **Session

The correct answer is: **b. Maintaining operations despite disruptions**.

The correct answer is **b. Logic Bomb**. A logic bomb is a piece of malicious code that is triggered by specific conditions or events, such as a particular date or the occurrence of a certain action.

In the context of availability, 'Timeliness' refers to: **c. Ensuring data is available promptly with low latency**. This means that the data or services must be accessible when needed, with minimal delay.

The best definition of 'Threat Modeling' is: **c. Identifying, assessing, and addressing potential security threats**.