QUESTION NO: 1
Which of the following provides the MOST comprehensive understanding of an organization's information security posture?
Which of the following provides the MOST comprehensive understanding of an organization's information security posture?
Correct Answer: A
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 2
Which of the following is the BEST way to ensure the organization's security objectives are embedded in business operations?
Which of the following is the BEST way to ensure the organization's security objectives are embedded in business operations?
Correct Answer: A
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 3
What is the MOST important consideration for an organization operating in a highly regulated market when new regulatory requirements with high impact to the business need to be implemented?
What is the MOST important consideration for an organization operating in a highly regulated market when new regulatory requirements with high impact to the business need to be implemented?
Correct Answer: B
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 4
Which of the following is the PRIMARY goal of the eradication phase of an information security incident response process?
Which of the following is the PRIMARY goal of the eradication phase of an information security incident response process?
Correct Answer: A
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 5
The fundamental purpose of establishing security metrics is to:
The fundamental purpose of establishing security metrics is to:
Correct Answer: A
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 6
An organization is outsourcing a business function to an external vendor. Which of the following BEST enables management to ensure the vendor continuously complies with security requirements stated in the master contract?
An organization is outsourcing a business function to an external vendor. Which of the following BEST enables management to ensure the vendor continuously complies with security requirements stated in the master contract?
Correct Answer: C
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 7
When selecting metrics to monitor the effectiveness of an information security program, it is MOST important for an information security manager to:
When selecting metrics to monitor the effectiveness of an information security program, it is MOST important for an information security manager to:
Correct Answer: B
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 8
When an information security manager presents an information security program status report to senior management, the MAIN focus should be:
When an information security manager presents an information security program status report to senior management, the MAIN focus should be:
Correct Answer: D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 9
The PRIMARY reason for establishing a data classification scheme is to identify:
The PRIMARY reason for establishing a data classification scheme is to identify:
Correct Answer: A
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 10
An organization has implemented a new email filter to mitigate risk associated with its email system. Who is BEST suited to be the control owner?
An organization has implemented a new email filter to mitigate risk associated with its email system. Who is BEST suited to be the control owner?
Correct Answer: A
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 11
After segmenting critical data on the network, a risk assessment shows that the risk of data exposure is still above an acceptable level. Which additional control would BEST mitigate further risk?
After segmenting critical data on the network, a risk assessment shows that the risk of data exposure is still above an acceptable level. Which additional control would BEST mitigate further risk?
Correct Answer: B
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 12
Which of the following should be the FIRST consideration when developing a strategy for protecting an organization's data?
Which of the following should be the FIRST consideration when developing a strategy for protecting an organization's data?
Correct Answer: D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 13
Which phase of the incident management process includes removing the threat and restoring affected systems to their previous state?
Which phase of the incident management process includes removing the threat and restoring affected systems to their previous state?
Correct Answer: D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 14
What is the BEST way to verify the effectiveness of a newly implemented firewall?
What is the BEST way to verify the effectiveness of a newly implemented firewall?
Correct Answer: C
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).