Scenario: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified.
Which of the following is the FIRST action the CISO will perform after receiving the audit report?

• A.Inform peer executives of the audit results
• B.Create remediation plans to address program gaps
• C.Determine if security policies and procedures are adequate
• D.Validate gaps and accepts or dispute the audit findings

Comment: *

Name: *

Email: *

Verification: *

Physical security measures typically include which of the following components?

• A.Operational, Biometric, Physical
• B.Technical, Strong Password, Operational
• C.Strong password, Biometric, Common Access Card
• D.Physical, Technical, Operational

Comment: *

Name: *

Email: *

Verification: *

You have recently drafted a revised information security policy. From whom should you seek endorsement in order to have the GREATEST chance for adoption and implementation throughout the entire organization?

• A.Chief Information Security Officer
• B.Chief Executive Officer
• C.Chief Information Officer
• D.Chief Legal Counsel

Comment: *

Name: *

Email: *

Verification: *

Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN.
The organization wants a more permanent solution to the threat to user credential compromise through phishing. What technical solution would BEST address this issue?

• A.Professional user education on phishing conducted by a reputable vendor
• B.Multi-factor authentication employing hard tokens
• C.Forcing password changes every 90 days
• D.Decreasing the number of employees with administrator privileges

Comment: *

Name: *

Email: *

Verification: *

The main purpose of the SOC is:

• A.An organization which provides Tier 1 support for technology issues and provides escalation when needed
• B.A distributed organization which provides intelligence to governments and private sectors on cyber- criminal activities
• C.The coordination of personnel, processes and technology to identify information security events and provide timely response and remediation
• D.A device which consolidates event logs and provides real-time analysis of security alerts generated by applications and network hardware

Comment: *

Name: *

Email: *

Verification: *