In terms of supporting a forensic investigation, it is now imperative that managers, first-responders, etc., accomplish the following actions to the computer under investigation:

• A.Secure the area and shut-down the computer until investigators arrive
• B.Secure the area and attempt to maintain power until investigators arrive
• C.Immediately place hard drive and other components in an anti-static bag
• D.Secure the area.

Comment: *

Name: *

Email: *

Verification: *

Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.
The CISO has been able to implement a number of technical controls and is able to influence the Information Technology teams but has not been able to influence the rest of the organization.
From an organizational perspective, which of the following is the LIKELY reason for this?

• A.The CISO reports to the IT organization
• B.The CISO has not implemented a policy management framework
• C.The CISO does not report directly to the CEO of the organization
• D.The CISO has not implemented a security awareness program

Comment: *

Name: *

Email: *

Verification: *

A system is designed to dynamically block offending Internet IP-addresses from requesting services from a secure website. This type of control is considered

• A.Preventive detection control
• B.Dynamic blocking control
• C.Zero-day attack mitigation
• D.Corrective security control

Comment: *

Name: *

Email: *

Verification: *

Which of the following is considered one of the most frequent failures in project management?

• A.Insufficient resources
• B.Excessive personnel on project
• C.Overly restrictive management
• D.Failure to meet project deadlines

Comment: *

Name: *

Email: *

Verification: *

The organization does not have the time to remediate the vulnerability; however it is critical to release the application.
Which of the following needs to be further evaluated to help mitigate the risks?

• A.Deploy Intrusion Detection Systems
• B.Implement Compensating Controls
• C.Provide security testing tools
• D.Provide developer security training

Comment: *

Name: *

Email: *

Verification: *