Bob waits near a secured door, holding a box. He waits until an employee walks up to the secured door and uses the special card in order to access the restricted area of the target company. Just as the employee opens the door, Bob walks up to the employee (still holding the box) and asks the employee to hold the door open so that he can enter. What is the best way to undermine the social engineering activity of tailgating?

• A.Setup a mock video camera next to the special card reader adjacent to the secure door
• B.Post a sign that states, "no tailgating" next to the special card reader adjacent to the secure door
• C.Issue special cards to access secure doors at the company and provide a one-time only brief description of use of the special card
• D.Educate and enforce physical security policies of the company to all the employees on a regular basis

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides an independent assessment of a vendor's internal security controls and overall posture?

• A.PCI attestation of compliance
• B.Financial statements
• C.Alignment with business goals
• D.ISO27000 accreditation

Comment: *

Name: *

Email: *

Verification: *

Which of the following set of processes is considered to be one of the cornerstone cycles of the International Organization for Standardization (ISO) 27001 standard?

• A.Plan-Select-Implement-Evaluate
• B.Plan-Check-Do-Act
• C.Plan-Do-Check-Act
• D.SCORE (Security Consensus Operational Readiness Evaluation)

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST logical method of deploying security controls within an organization?

• A.Apply the least costly controls to demonstrate positive program activity
• B.Obtain funding for all desired controls and then create project plans for implementation
• C.Obtain business unit buy-in through close communication and coordination
• D.Apply the simpler controls as quickly as possible and use a risk-based approach for the more difficult and costly controls

Comment: *

Name: *

Email: *

Verification: *

The primary purpose of a risk register is to:

• A.Maintain a log of discovered risks
• B.Track individual risk assessments
• C.Develop plans for mitigating identified risks
• D.Coordinate the timing of scheduled risk assessments

Comment: *

Name: *

Email: *

Verification: *