1) What is a security policy? what are the typical elements of a policy?

2) what are security controls and how do they relate to security architecture. Give a specific example.

3) Differentiate between public-key and private key encryption.

4) What is multi-factor authentication? Give an example of multi-factor authentication ( other than "use rid and password") commonly used by businesses. Identify and describe two common software ( coding ) errors, and discuss why they pose security vulnerabilities.