Explanation/Reference:
Explanation:
The equal-error rate (EER) of a biometric system denotes the percent at which the false-acceptance rate (FAR) is equal to the false-rejection rate (FRR). The biometric that has the lowest EER is the most effective. The biometric that has the highest EER is the most ineffective. For any biometric, there will be a measure at which the FRR will be equal to the FAR. This is the EER. FER is an aggregate measure of FRR.

Section: Protection of Information Assets
Explanation:
With public key encryption or asymmetric encryption, data is encrypted by the sender using the recipient's
public key; the data is then decrypted using the recipient's private key.

Explanation/Reference:
Explanation:
The scope of an IS audit is defined by its objectives. This involves identifying control weaknesses relevant to the scope of the audit. Obtaining sufficient and appropriate evidence assists the auditor in not only identifying control weaknesses but also documenting and validating them.
Complying with regulatory requirements, ensuring coverage and the execution of audit are all relevant to an audit but are not the reason why sufficient and relevant evidence is required.

Explanation/Reference:
Explanation:
Criticality of assets is often influenced by the business criticality of the data to be protected and by the scope of the impact upon the organization as a whole. For example, the loss of a network backbone creates a much greater impact on the organization as a whole than the loss of data on a typical user's workstation.

この状況において最も包括的な対策は、パスワードの実装と管理です。ファイアウォールは主要な防御手段ですが、すべてのアクセスを保護できるわけではないため、一定のリスクが残ります。プロキシサーバーはファイアウォールの一種であるため、同じルールが適用されます。ネットワーク管理者も対策の一つとして機能しますが、通常、複数の多様なシステムに対しては十分な対策とは言えません。