When operating under severe budget constraints a CISO will have to be creative to maintain a strong security organization.
Which example below is the MOST creative way to maintain a strong security posture during these difficult times?

• A.Download security tools from a trusted source and deploy to production network
• B.Download open source security tools and deploy them on your production network
• C.Download open source security tools from a trusted site, test, and then deploy on production network
• D.Download trial versions of commercially available security tools and deploy on your production network

Comment: *

Name: *

Email: *

Verification: *

What are the three stages of an identity and access management system?

• A.Authentication, Authorize, Validation
• B.Provision, Administration, Enforcement
• C.Administration, Validation, Protect
• D.Provision, Administration, Authentication

Comment: *

Name: *

Email: *

Verification: *

What are the primary reasons for the development of a business case for a security project?

• A.To understand the attack vectors and attack sources
• B.To estimate risk and negate liability to the company
• C.To communicate risk and forecast resource needs
• D.To forecast usage and cost per software licensing

Comment: *

Name: *

Email: *

Verification: *

Michael starts a new job and discovers that he has unnecessary access to a variety of systems. Which of the following best describes the problem he has encountered?

• A.Excessive privileges
• B.Rights collision
• C.Least privileges
• D.Privilege creep

Comment: *

Name: *

Email: *

Verification: *

A missing/ineffective security control is identified.
Which of the following should be the NEXT step?

• A.Perform an audit to measure the control formally
• B.Establish Key Risk Indicators
• C.Escalate the issue to the IT organization
• D.Perform a risk assessment to measure risk

Comment: *

Name: *

Email: *

Verification: *