Your company has a "no right to privacy" notice on all logon screens for your information systems and users sign an Acceptable Use Policy informing them of this condition. A peer group member and friend comes to you and requests access to one of her employee's email account.
What should you do?

• A.Assist her with the request, but only after her supervisor signs off on the action.
• B.None
• C.Deny the request citing national privacy laws
• D.Reset the employee's password and give it to the supervisor.
• E.Grant her access, the employee has been adequately warned through the AUP.

Comment: *

Name: *

Email: *

Verification: *

This occurs when the quantity or quality of project deliverables is expanded from the original project plan.

• A.Scope creep
• B.Deadline extension
• C.Scope modification
• D.Deliverable expansion

Comment: *

Name: *

Email: *

Verification: *

The MOST common method to get an unbiased measurement of the effectiveness of an Information Security Management System (ISMS) is to_________________________.

• A.perform an independent audit of the security controls
• B.create operational reports on the effectiveness of the controls.
• C.assign the responsibility to the information security team
• D.assign the responsibility to the team responsible for the management of the controls

Comment: *

Name: *

Email: *

Verification: *

A security manager has created a risk program. Which of the following is a critical part of ensuring the program is successful?

• A.Ensuring developers include risk control comments in code
• B.Allowing for the acceptance of risk for regulatory compliance requirements
• C.Providing a risk program governance structure
• D.Creating risk assessment templates based on specific threats

Comment: *

Name: *

Email: *

Verification: *

Scenario: Your company has many encrypted telecommunications links for their world-wide operations.
Physically distributing symmetric keys to all locations has proven to be administratively burdensome, but symmetric keys are preferred to other alternatives.
Symmetric encryption in general is preferable to asymmetric encryption when:

• A.The distance to the end node is farthest away
• B.The number of unique communication links is large
• C.The volume of data being transmitted is small
• D.The speed of the encryption / deciphering process is essential

Comment: *

Name: *

Email: *

Verification: *