Your penetration testing team installs an in-line hardware key logger onto one of your network machines. Which of the following is of major concern to the security organization?

• A.In-line hardware keyloggers don't require physical access
• B.In-line hardware keyloggers are undetectable by software
• C.In-line hardware keyloggers don't comply to industry regulations
• D.In-line hardware keyloggers are relatively inexpensive

Comment: *

Name: *

Email: *

Verification: *

A CISO sees abnormally high volumes of exceptions to security requirements and constant pressure from business units to change security processes. Which of the following represents the MOST LIKELY cause of this situation?

• A.Poor audit support for the security program
• B.A lack of executive presence within the security program
• C.Poor alignment of the security program to business needs
• D.This is normal since business units typically resist security requirements

Comment: *

Name: *

Email: *

Verification: *

When obtaining new products and services, why is it essential to collaborate with lawyers, IT security professionals, privacy professionals, security engineers, suppliers, and others?

• A.This makes sure the files you exchange aren't unnecessarily flagged by the Data Loss Prevention (DLP) system
• B.Contracting rules typically require you to have conversations with two or more groups
• C.Discussing decisions with a very large group of people always provides a better outcome
• D.It helps to avoid regulatory or internal compliance issues

Comment: *

Name: *

Email: *

Verification: *

Within an organization's vulnerability management program, who has the responsibility to implement remediation actions?

• A.Security officer
• B.System administrator
• C.Vulnerability engineer
• D.Data owner

Comment: *

Name: *

Email: *

Verification: *

Which of the following functions MUST your Information Security Governance program include for formal organizational reporting?

• A.Human Resources and Budget
• B.Audit and Legal
• C.Budget and Compliance
• D.Legal and Human Resources

Comment: *

Name: *

Email: *

Verification: *