Which of the following would negatively impact a log analysis of a multinational organization?

• A.Centralized log management
• B.Encrypted log files in transit
• C.Each node set to local time
• D.Log aggregation agent each node

Comment: *

Name: *

Email: *

Verification: *

SCENARIO: A CISO has several two-factor authentication systems under review and selects the one that is most sufficient and least costly. The implementation project planning is completed and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization's needs.
The CISO is unsure of the information provided and orders a vendor proof of concept to validate the system's scalability. This demonstrates which of the following?

• A.A methodology-based approach to ensure authentication mechanism functions
• B.A risk-based approach to determine if the solution is suitable for investment
• C.An approach providing minimum time impact to the implementation schedules
• D.An approach that allows for minimum budget impact if the solution is unsuitable

Comment: *

Name: *

Email: *

Verification: *

Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.
This global retail company is expected to accept credit card payments. Which of the following is of MOST concern when defining a security program for this organization?

• A.International encryption restrictions
• B.Adherence to local data breach notification laws
• C.Compliance to Payment Card Industry (PCI) data security standards
• D.Compliance with local government privacy laws

Comment: *

Name: *

Email: *

Verification: *

A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization. Which of the following principles does this best demonstrate?

• A.Effective use of existing technologies
• B.Proper budget management
• C.Alignment with the business
• D.Leveraging existing implementations

Comment: *

Name: *

Email: *

Verification: *

A company wants to fill a Chief Information Security Officer position in the organization. They need to define and implement a more holistic security program. Which of the following qualifications and experience would be MOST desirable to find in a candidate?

• A.College degree, audit capabilities and complex project management
• B.Industry certifications, technical knowledge and program management skills
• C.Multiple references, strong background check and industry certifications
• D.Multiple certifications, strong technical capabilities and lengthy resume

Comment: *

Name: *

Email: *

Verification: *