One traditional use of a SIEM appliance is to monitor for exceptions received via syslog.
What system from the following does NOT natively support syslog events?

• A.Enterprise Stateful Firewall.
• B.Windows Desktop Systems.
• C.Enterprise Wireless Access Point.
• D.Linux Web Server Appliances.

Comment: *

Name: *

Email: *

Verification: *

According to ISO/IEC 27000, which of the following is the definition of a vulnerability?

• A.The threat that an asset or group of assets may be damaged by an exploit.
• B.The damage that has been caused by a weakness iin a system.
  Vulnerability
  A vulnerability is a weakness of an asset or control that could potentially be exploited by one or more threats.
  An asset is any tangible or intangible thing or characteristic that has value to an organization, a control is any administrative, managerial, technical, or legal method that can be used to modify or manage risk, and a threat is any potential event that could harm an organization or system.
  https://www.praxiom.com/iso-27000-definitions.htm
• C.A weakness of an asset or group of assets that can be exploited by one or more threats.
• D.The impact of a cyber attack on an asset or group of assets.

Comment: *

Name: *

Email: *

Verification: *

What Is the first yet MOST simple and important action to take when setting up a new web server?

• A.Apply hardening to all applications.
• B.Patch the OS to the latest version
• C.Fully encrypt the hard disk.
• D.Change default system passwords.

Comment: *

Name: *

Email: *

Verification: *

When considering outsourcing the processing of data, which two legal "duty of care" considerations SHOULD the original data owner make?
1 Third party is competent to process the data securely.
2. Observes the same high standards as data owner.
3. Processes the data wherever the data can be transferred.
4. Archive the data for long term third party's own usage.

• A.1 and 2.
• B.2 and 3.
• C.3 and 4.
• D.1 and 4.

Comment: *

Name: *

Email: *

Verification: *

Which of the following describes a qualitative risk assessment approach?

• A.A subjective assessment of risk occurrence likelihood against the potential impact that determines the overall severity of a risk.
• B.The use of Monte-Carlo Analysis and Layers of Protection Analysis (LOPA) to determine the overall severity of a risk.
• C.The use of verifiable data to predict the risk occurrence likelihood and the potential impact so as to determine the overall severity of a risk.
• D.The use of Risk Tolerance and Risk Appetite values to determine the overall severity of a risk

Comment: *

Name: *

Email: *

Verification: *