Which of the following is an accurate statement regarding capital expenses?

• A.The organization is typically able to regain the initial cost by selling this type of asset
• B.Capital expenses can never be replaced by operational expenses
• C.They are easily reduced through the elimination of usage, such as reducing power for lighting of work areas during off-hours
• D.Capital expenses are typically long-term investments with value being realized through their use

Comment: *

Name: *

Email: *

Verification: *

An employee successfully avoids becoming a victim of a sophisticated spear phishing attack due to knowledge gained through the corporate information security awareness program. What type of control has been effectively utilized?

• A.Management Control
• B.Training Control
• C.Technical Control
• D.Operational Control

Comment: *

Name: *

Email: *

Verification: *

What are the three stages of an identity and access management system?

• A.Authentication, Authorize, Validation
• B.Provision, Administration, Enforcement
• C.Administration, Validation, Protect
• D.Provision, Administration, Authentication

Comment: *

Name: *

Email: *

Verification: *

Creating good security metrics is essential for a CISO. What would be the BEST sources for creating security metrics for baseline defenses coverage?

• A.Firewall, exchange, web server, intrusion detection system (IDS)
• B.IDS, syslog, router, switches
• C.Servers, routers, switches, modem
• D.Firewall, anti-virus console, IDS, syslog

Comment: *

Name: *

Email: *

Verification: *

The effectiveness of social engineering penetration testing using phishing can be used as a Key Performance Indicator (KPI) for the effectiveness of an organization's

• A.Security Awareness Program.
• B.Risk Management Program.
• C.Identity and Access Management Program.
• D.Anti-Spam controls.

Comment: *

Name: *

Email: *

Verification: *