Which of the following is the MOST logical method of deploying security controls within an organization?

• A.Apply the simpler controls as quickly as possible and use a risk-based approach for the more difficult and costly controls
• B.Obtain business unit buy-in through close communication and coordination
• C.Obtain funding for all desired controls and then create project plans for implementation
• D.Apply the least costly controls to demonstrate positive program activity

Comment: *

Name: *

Email: *

Verification: *

How often should an environment be monitored for cyber threats, risks, and exposures?

• A.Monthly
• B.Weekly
• C.Daily
• D.Quarterly

Comment: *

Name: *

Email: *

Verification: *

Your incident handling manager detects a virus attack in the network of your company. You develop a signature based on the characteristics of the detected virus.
Which of the following phases in the incident handling process will utilize the signature to resolve this incident?

• A.Recovery
• B.Containment
• C.Identification
• D.Eradication

Comment: *

Name: *

Email: *

Verification: *

An IT auditor has recently discovered that because of a shortage of skilled operations personnel, the security administrator has agreed to work one late night shift a week as the senior computer operator. The most appropriate course of action for the IT auditor is to:

• A.Develop a computer assisted audit technique to detect instances of abuses of the arrangement.
• B.Inform senior management of the risk involved.
• C.Agree to work with the security officer on these shifts as a form of preventative control.
• D.Review the system log for each of the late night shifts to determine whether any irregular actions occurred.

Comment: *

Name: *

Email: *

Verification: *

When evaluating a Managed Security Services Provider (MSSP), which service(s) is/are most important:

• A.Patch management
• B.24/7 tollfree number
• C.Network monitoring
• D.Ability to provide security services tailored to the business' needs

Comment: *

Name: *

Email: *

Verification: *