Your incident handling manager detects a virus attack in the network of your company. You develop a signature based on the characteristics of the detected virus. Which of the following phases in the incident handling process will utilize the signature to resolve this incident?

• A.Recovery
• B.Identification
• C.Eradication
• D.Containment

Comment: *

Name: *

Email: *

Verification: *

Risk that remains after risk mitigation is known as

• A.Residual risk
• B.Non-tolerated risk
• C.Accepted risk
• D.Persistent risk

Comment: *

Name: *

Email: *

Verification: *

The establishment of a formal risk management framework and system authorization program is essential.
The LAST step of the system authorization process is:

• A.Contacting the Internet Service Provider for an IP scope
• B.Getting authority to operate the system from executive management
• C.Changing the default passwords
• D.Conducting a final scan of the live system and mitigating all high and medium level vulnerabilities

Comment: *

Name: *

Email: *

Verification: *

An organization licenses and uses personal information for business operations, and a server containing that information has been compromised. What kind of law would require notifying the owner or licensee of this incident?

• A.Consumer right disclosure
• B.Security incident disclosure
• C.Special circumstance disclosure
• D.Data breach disclosure

Comment: *

Name: *

Email: *

Verification: *

Which of the following most commonly falls within the scope of an information security governance steering committee?

• A.Approving access to critical financial systems
• B.Developing content for security awareness programs
• C.Interviewing candidates for information security specialist positions
• D.Vetting information security policies

Comment: *

Name: *

Email: *

Verification: *