You currently cannot provide for 24/7 coverage of your security monitoring and incident response duties and your company is resistant to the idea of adding more full-time employees to the payroll.
Which combination of solutions would help to provide the coverage needed without the addition of more dedicated staff?

• A.Employ an assumption of breach protocol and defend only essential information resources.
• B.Deploy a SEIM solution and have current staff review incidents first in the morning
• C.Configure your syslog to send SMS messages to current staff when target events are triggered.
• D.Contract with a managed security provider and have current staff on recall for incident response

Comment: *

Name: *

Email: *

Verification: *

You have a system with 2 identified risks. You determine the probability of one risk occurring is higher than the

• A.Risk impact comparison
• B.Controlled mitigation effort
• C.Comparative threat analysis
• D.Relative likelihood of event

Comment: *

Name: *

Email: *

Verification: *

Which of the following has the GREATEST impact on the implementation of an information security governance model?

• A.Complexity of organizational structure
• B.Distance between physical locations
• C.Organizational budget
• D.Number of employees

Comment: *

Name: *

Email: *

Verification: *

An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System. Which of the following international standards can BEST assist this organization?

• A.International Organization for Standardizations - 27005 (ISO-27005)
• B.Payment Card Industry Data Security Standards (PCI-DSS)
• C.International Organization for Standardizations - 27004 (ISO-27004)
• D.Control Objectives for Information Technology (COBIT)

Comment: *

Name: *

Email: *

Verification: *

When updating the security strategic planning document what two items must be included?

• A.Alignment with the business goals and the vision of the CIO
• B.The alignment with the business goals and the risk tolerance
• C.The executive summary and vision of the board of directors
• D.The risk tolerance of the company and the company mission statement

Comment: *

Name: *

Email: *

Verification: *