Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.
Which of the following is the reason the CISO has not been able to advance the security agenda in this organization?

• A.Lack of identification of technology stake holders
• B.Lack of a security awareness program
• C.Lack of business continuity process
• D.Lack of influence with leaders outside IT

Comment: *

Name: *

Email: *

Verification: *

A severe security threat has been detected on your corporate network. As CISO you quickly assemble key members of the Information Technology team and business operations to determine a modification to security controls in response to the threat. This is an example of:

• A.Security Incident Response
• B.Business continuity planning
• C.Change management
• D.Thought leadership

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a common technology for visual monitoring?

• A.Closed circuit television
• B.Open circuit television
• C.Blocked video
• D.Local video

Comment: *

Name: *

Email: *

Verification: *

The Security Operations Center (SOC) just purchased a new intrusion prevention system (IPS) that needs to be deployed in-line for best defense. The IT group is concerned about putting the new IPS in-line because it might negatively impact network availability. What would be the BEST approach for the CISO to reassure the IT group?

• A.Explain to the IT group that the IPS won't cause any network impact because it will fail open
• B.Explain to the IT group that this is a business need and the IPS will fail open however, if there is a network failure the CISO will accept responsibility
• C.Explain to the IT group that the IPS will fail open once in-line however it will be deployed in monitor mode for a set period of time to ensure that it doesn't block any legitimate traffic
• D.Work with the IT group and tell them to put IPS in-line and say it won't cause any network impact

Comment: *

Name: *

Email: *

Verification: *

Who is responsible for securing networks during a security incident?

• A.Security Operations Center (SO
• B.Chief Information Security Officer (CISO)
• C.Incident Response Team (IRT)
• D.Disaster Recovery (DR) manager

Comment: *

Name: *

Email: *

Verification: *