(ISC)2 SSCP Systems Security Certified Practitioner Official Study Guide, 3rd Edition

AppendixAnswers to Review Questions

Chapter 1: The Business Case for Decision Assurance and Information Security

1. B. This is the scientific method in action: make observations, ask questions, make informed guesses, get more data, and see if it fits what you think you've learned thus far. Repeat until you are highly confident. Option C refers to data analysis techniques that by themselves are useful, but still require interpretation to be part of knowledge creation. Option D is vague, imprecise, and not repeatable and, therefore, not scientific. Option A does not fit the definition of the data to wisdom pyramid of concepts, even though to many people, data, information, and knowledge are interchangeable terms.
2. B. People make decisions based ...