You have purchased a new insurance policy as part of your risk strategy. Which of the following risk strategy options have you engaged in?

• A.Risk Avoidance
• B.Risk Mitigation
• C.Risk Transfer
• D.Risk Acceptance

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a weakness of an asset or group of assets that can be exploited by one or more threats?

• A.Attack vector
• B.Exploitation
• C.Vulnerability
• D.Threat

Comment: *

Name: *

Email: *

Verification: *

A system is designed to dynamically block offending Internet IP-addresses from requesting services from a secure website. This type of control is considered

• A.Zero-day attack mitigation
• B.Corrective security control
• C.Preventive detection control
• D.Dynamic blocking control

Comment: *

Name: *

Email: *

Verification: *

Which of the following is true regarding expenditures?

• A.Operating expenditures are for acquiring assets, capital expenditures are for support costs of that asset
• B.Capital expenditures are for acquiring assets, whereas operating expenditures are for support costs of that asset
• C.Capital expenditures are used to define depreciation tables of intangible assets
• D.Capital expenditures are never taxable

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important for a CISO to understand when identifying threats?

• A.How the security operations team will behave to reported incidents
• B.How vulnerabilities can potentially be exploited in systems that impact the organization
• C.How the firewall and other security devices are configured to prevent attacks
• D.How the incident management team prepares to handle an attack

Comment: *

Name: *

Email: *

Verification: *