Which of the following is MOST useful when developing a business case for security initiatives?

• A.Budget forecasts
• B.Request for proposals
• C.Cost/benefit analysis
• D.Vendor management

Comment: *

Name: *

Email: *

Verification: *

When choosing a risk mitigation method what is the MOST important factor?

• A.Approval from the board of directors
• B.Cost of the mitigation is less than the risk
• C.Metrics of mitigation method success
• D.Mitigation method complies with PCI regulations

Comment: *

Name: *

Email: *

Verification: *

You are the Chief Information Security Officer of a large, multinational bank and you suspect there is a flaw in a two factor authentication token management process.
Which of the following represents your BEST course of action?

• A.Send a report to executive peers and business unit owners detailing your suspicions
• B.Conduct a throughout risk assessment against the current implementation to determine system functions
• C.Determine program ownership to implement compensating controls
• D.Validate that security awareness program content includes information about the potential vulnerability

Comment: *

Name: *

Email: *

Verification: *

Which of the following is of MOST importance when security leaders of an organization are required to align security to influence the culture of an organization?

• A.Poses a strong technical background
• B.Understand all regulations affecting the organization
• C.Understand the business goals of the organization
• D.Poses a strong auditing background

Comment: *

Name: *

Email: *

Verification: *

A Security Operations Centre (SOC) manager is informed that a database containing highly sensitive corporate strategy information is under attack. Information has been stolen and the database server was disconnected. Who must be informed of this incident?

• A.Internal audit
• B.The data owner
• C.All executive staff
• D.Government regulators

Comment: *

Name: *

Email: *

Verification: *