Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.
The CISO has been able to implement a number of technical controls and is able to influence the Information Technology teams but has not been able to influence the rest of the organization.
From an organizational perspective, which of the following is the LIKELY reason for this?

• A.The CISO reports to the IT organization
• B.The CISO has not implemented a policy management framework
• C.The CISO does not report directly to the CEO of the organization
• D.The CISO has not implemented a security awareness program

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements about Encapsulating Security Payload (ESP) is true?

• A.It is an IPSec protocol.
• B.It is a text-based communication protocol.
• C.It uses TCP port 22 as the default port and operates at the application layer.
• D.It uses UDP port 22

Comment: *

Name: *

Email: *

Verification: *

Scenario: Your program is developed around minimizing risk to information by focusing on people, technology, and operations.
You have decided to deal with risk to information from people first. How can you minimize risk to your most sensitive information before granting access?

• A.Conduct background checks on individuals before hiring them
• B.Develop an Information Security Awareness program
• C.Set your firewall permissions aggressively and monitor logs regularly.
• D.Monitor employee browsing and surfing habits

Comment: *

Name: *

Email: *

Verification: *

Which of the following are the triple constraints of project management?

• A.Time, quality, and scope
• B.Cost, quality, and time
• C.Scope, time, and cost
• D.Quality, scope, and cost

Comment: *

Name: *

Email: *

Verification: *

File Integrity Monitoring (FIM) is considered a

• A.Network based security preventative control
• B.Software segmentation control
• C.Security detective control
• D.User segmentation control

Comment: *

Name: *

Email: *

Verification: *