If a CISO wants to understand the liabilities of the company, she will refer to the:

• A.Statement of Proxy
• B.Statement of Retained Earnings
• C.once Sheet
• D.Profit and Loss Statement

Comment: *

Name: *

Email: *

Verification: *

An application vulnerability assessment has identified a security flaw in an application. This is a flaw that was previously identified and remediated on a prior release of the application. Which of the following is MOST likely the reason for this recurring issue?

• A.Ineffective configuration management controls
• B.Lack of change management controls
• C.Lack of version/source controls
• D.High turnover in the application development department

Comment: *

Name: *

Email: *

Verification: *

Scenario: Your company has many encrypted telecommunications links for their world-wide operations. Physically distributing symmetric keys to all locations has proven to be administratively burdensome, but symmetric keys are preferred to other alternatives.
How can you reduce the administrative burden of distributing symmetric keys for your employer?

• A.Symmetrically encrypt the key and then use asymmetric encryption to unencrypt it
• B.Use a self-generated key on both ends to eliminate the need for distribution
• C.Use asymmetric encryption for the automated distribution of the symmetric key
• D.Use certificate authority to distribute private keys

Comment: *

Name: *

Email: *

Verification: *

What is the estimate of all direct and indirect costs associated with an asset or acquisition over its entire life cycle?

• A.Total Cost of Production
• B.Return on Investment
• C.Total COST of Product
• D.Total Cost of Ownership

Comment: *

Name: *

Email: *

Verification: *

The risk found after a control has been fully implemented is called:

• A.Residual Risk
• B.Total Risk
• C.Post implementation risk
• D.Transferred risk

Comment: *

Name: *

Email: *

Verification: *