SCENARIO: Critical servers show signs of erratic behavior within your organization's intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team.
In what phase of the response will the team extract information from the affected systems without altering original data?

• A.Investigation
• B.Response
• C.Follow-up
• D.Recovery

Comment: *

Name: *

Email: *

Verification: *

Bob waits near a secured door, holding a box. He waits until an employee walks up to the secured door and uses the special card in order to access the restricted area of the target company. Just as the employee opens the door, Bob walks up to the employee (still holding the box) and asks the employee to hold the door open so that he can enter. What is the best way to undermine the social engineering activity of tailgating?

• A.Post a sign that states, "no tailgating" next to the special card reader adjacent to the secure door
• B.Issue special cards to access secure doors at the company and provide a one-time only brief description of use of the special card
• C.Educate and enforce physical security policies of the company to all the employees on a regular basis
• D.Setup a mock video camera next to the special card reader adjacent to the secure door

Comment: *

Name: *

Email: *

Verification: *

A Chief Information Security Officer received a list of high, medium, and low impact audit findings. Which of the following represents the BEST course of action?

• A.If the findings do not impact regulatory compliance, remediate only the high and medium risk findings.
• B.If the findings impact regulatory compliance, try to apply remediation that will address the most findings for the least cost.
• C.If the findings impact regulatory compliance, remediate the high findings as quickly as possible.
• D.If the findings do not impact regulatory compliance, review current security controls.

Comment: *

Name: *

Email: *

Verification: *

How often should the Statements of Standards for Attestation Engagements-16 (SSAE16)/International Standard on Assurance Engagements 3402 (ISAE3402) report of your vendors be reviewed?

• A.Annually
• B.Quarterly
• C.Bi-annually
• D.Semi-annually

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST useful when developing a business case for security initiatives?

• A.Request for proposals
• B.Budget forecasts
• C.Vendor management
• D.Cost/benefit analysis

Comment: *

Name: *

Email: *

Verification: *