By convention, the first character in a string is always designated as position __________________.

The SSL record protocol provides two services for SSL connection: message integrity and _________.

Fill in the blank(s) with the appropriate word(s).

Which of the following is not true?

A. Management may outsource their organizations' IT functions, but they cannot outsource their management responsibilities for internal control. B. Section 404 requires the explicit testing of outsourced controls. C. The SSAE 16 report, which is prepared by the outsourcer's auditor, attests to the adequacy of the vendor's internal controls. D. Auditors issue two types of SSAE 16 reports: Type I report and Type II report.