Scenario: Your company has many encrypted telecommunications links for their world-wide operations. Physically distributing symmetric keys to all locations has proven to be administratively burdensome, but symmetric keys are preferred to other alternatives.
How can you reduce the administrative burden of distributing symmetric keys for your employer?

• A.Use certificate authority to distribute private keys
• B.Symmetrically encrypt the key and then use asymmetric encryption to unencrypt it
• C.Use asymmetric encryption for the automated distribution of the symmetric key
• D.Use a self-generated key on both ends to eliminate the need for distribution

Comment: *

Name: *

Email: *

Verification: *

While designing a secondary data center for your company what document needs to be analyzed to determine to how much should be spent on building the data center?

• A.Application mapping document
• B.Business continuity plan
• C.Enterprise Risk Assessment
• D.Disaster recovery strategic plan

Comment: *

Name: *

Email: *

Verification: *

The patching and monitoring of systems on a consistent schedule is required by?

• A.Risk Management frameworks
• B.Audit best practices
• C.Local privacy laws
• D.Industry best practices

Comment: *

Name: *

Email: *

Verification: *

When managing an Information Security Program, which of the following is of MOST importance in order to influence the culture of an organization?

• A.Compliance with local privacy regulations
• B.Support from Legal and HR teams
• C.An independent Governance, Risk and Compliance organization
• D.Alignment of security goals with business goals

Comment: *

Name: *

Email: *

Verification: *

Information security policies should be reviewed:

• A.by internal audit semiannually
• B.by the CISO when new systems are brought online
• C.by stakeholders at least annually
• D.by the Incident Response team after an audit

Comment: *

Name: *

Email: *

Verification: *