In MOST organizations which group periodically reviews network intrusion detection system logs for all systems as part of their daily tasks?

• A.Internal Audit
• B.Information Security
• C.Compliance
• D.Database Administration

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a benefit of information security governance?

• A.Increasing the risk of decisions based on incomplete management information.
• B.Direct involvement of senior management in developing control processes
• C.Questioning the trust in vendor relationships.
• D.Reduction of the potential for civil and legal liability

Comment: *

Name: *

Email: *

Verification: *

Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates.
When multiple regulations or standards apply to your industry you should set controls to meet the:

• A.Most complex standard to implement
• B.Recommendations of your Legal Staff
• C.Stricter regulation or standard
• D.Easiest regulation or standard to implement

Comment: *

Name: *

Email: *

Verification: *

When considering using a vendor to help support your security devices remotely, what is the BEST choice for allowing access?

• A.Vendor uses a company supplied laptop and logins using two factor authentication with their own unique credentials
• B.Vendors uses their own laptop and logins with same admin credentials your security team uses
• C.Vendor uses their own laptop and logins using two factor authentication with their own unique credentials
• D.Vendor uses a company supplied laptop and logins using two factor authentication with same admin credentials your security team uses

Comment: *

Name: *

Email: *

Verification: *

SCENARIO: Critical servers show signs of erratic behavior within your organization's intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team.
During initial investigation, the team suspects criminal activity but cannot initially prove or disprove illegal actions. What is the MOST critical aspect of the team's activities?

• A.Eradication of malware and system restoration
• B.Regular communication of incident status to executives
• C.Determination of the attack source
• D.Preservation of information

Comment: *

Name: *

Email: *

Verification: *