Which of the following is considered a project versus a managed process?

• A.monitoring external and internal environment during incident response
• B.ongoing risk assessment of routine operations
• C.continuous vulnerability assessment and vulnerability repair
• D.installation of a new firewall system

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY objective of security awareness is to:

• A.Encourage security-conscious behavior
• B.Put employees on notice in case follow-up action for noncompliance is necessary
• C.Ensure that security policies are read.

Comment: *

Name: *

Email: *

Verification: *

As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building.
Below your office window you notice a door that is normally propped open during the day for groups of people to take breaks outside. Upon looking closer you see there is no badge reader.
What should you do?

• A.Post a guard at the door to maintain physical security
• B.Close and chain the door shut and send a company-wide memo banning the practice
• C.Have a risk assessment performed
• D.Nothing, this falls outside your area of influence

Comment: *

Name: *

Email: *

Verification: *

Which of the following organizations is typically in charge of validating the implementation and effectiveness of security controls?

• A.Security Operations
• B.Internal/External Audit
• C.Risk Management
• D.Security Administrators

Comment: *

Name: *

Email: *

Verification: *

Which of the following are the triple constraints of project management?

• A.Scope, time, and cost
• B.Quality, scope, and cost
• C.Cost, quality, and time
• D.Time, quality, and scope

Comment: *

Name: *

Email: *

Verification: *