The executive board has requested that the CISO of an organization define and Key Performance Indicators (KPI) to measure the effectiveness of the security awareness program provided to call center employees.
Which of the following can be used as a KPI?

• A.Number of successful social engineering attempts on the call center
• B.Number of callers who abandon the call before speaking with a representative
• C.Number of callers who report a lack of customer service from the call center
• D.Number of callers who report security issues.

Comment: *

Name: *

Email: *

Verification: *

You manage a newly created Security Operations Center (SOC), your team is being inundated with security alerts and don't know what to do.
What is the BEST approach to handle this situation?

• A.Tune the sensors to help reduce false positives so the team can react better
• B.Tell the team to only respond to the critical and high alerts
• C.Tell the team to do their best and respond to each alert
• D.Request additional resources to handle the workload

Comment: *

Name: *

Email: *

Verification: *

John is the project manager for a large project in his organization. A new change request has been proposed that will affect several areas of the project. One area of the project change impact is on work that a vendor has already completed. The vendor is refusing to make the changes as they've already completed the project work they were contracted to do. What can John do in this instance?

• A.Refer the vendor to the Service Level Agreement (SLA) and insist that they make the changes.
• B.Review the Request for Proposal (RFP) for guidance.
• C.Withhold the vendor's payments until the issue is resolved.
• D.Refer to the contract agreement for direction.

Comment: *

Name: *

Email: *

Verification: *

Security related breaches are assessed and contained through which of the following?

• A.Incident response
• B.A forensic analysis.
• C.The IT support team.
• D.Physical security team.

Comment: *

Name: *

Email: *

Verification: *

Which of the following are not stakeholders of IT security projects?

• A.CISO
• B.Help Desk
• C.Third party vendors
• D.Board of directors

Comment: *

Name: *

Email: *

Verification: *