Which one of the following BEST describes which member of the management team is accountable for the day-to-day operation of the information security program?

• A.Security mangers
• B.Security administrators
• C.Security technicians
• D.Security analysts

Comment: *

Name: *

Email: *

Verification: *

What are the common data hiding techniques used by criminals?

• A.Disabled Logging and admin elevation
• B.Website defacement and log manipulation
• C.Encryption, Steganography, and Changing Metadata/Timestamps
• D.Unallocated space and masking

Comment: *

Name: *

Email: *

Verification: *

Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates.
When multiple regulations or standards apply to your industry you should set controls to meet the___________________________.

• A.Most complex standard
• B.Recommendations of your Legal Staff
• C.Easiest regulation or standard to implement
• D.Stricter regulation or standard

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important for a CISO to understand when identifying threats?

• A.How the incident management team prepares to handle an attack
• B.How the security operations team will behave to reported incidents
• C.How vulnerabilities can potentially be exploited in systems that impact the organization
• D.How the firewall and other security devices are configured to prevent attacks

Comment: *

Name: *

Email: *

Verification: *

An organization has defined a set of standard security controls. This organization has also defined the circumstances and conditions in which they must be applied. What is the NEXT logical step in applying the controls in the organization?

• A.Analyze existing controls on systems
• B.Determine the risk tolerance
• C.Create an architecture gap analysis
• D.Perform an asset classification

Comment: *

Name: *

Email: *

Verification: *