A customer of a bank has placed a dispute on a payment for a credit card account. The banking system uses digital signatures to safeguard the integrity of their transactions. The bank claims that the system shows proof that the customer in fact made the payment. What is this system capability commonly known as?

• A.non-repudiation
• B.conflict resolution
• C.strong authentication
• D.digital rights management

Comment: *

Name: *

Email: *

Verification: *

The Annualized Loss Expectancy (Before) minus Annualized Loss Expectancy (After) minus Annual Safeguard Cost is the formula for determining:

• A.Safeguard Value
• B.Cost Benefit Analysis
• C.Single Loss Expectancy
• D.Life Cycle Loss Expectancy

Comment: *

Name: *

Email: *

Verification: *

The Security Operations Center (SOC) just purchased a new intrusion prevention system (IPS) that needs to be deployed in-line for best defense. The IT group is concerned about putting the new IPS in-line because it might negatively impact network availability.
What would be the BEST approach for the CISO to reassure the IT group?

• A.Explain to the IT group that the IPS won't cause any network impact because it will fail open
• B.Explain to the IT group that the IPS will fail open once in-line however it will be deployed in monitor mode for a set period of time to ensure that it doesn't block any legitimate traffic
• C.Explain to the IT group that this is a business need and the IPS will fail open however, if there is a network failure the CISO will accept responsibility
• D.Work with the IT group and tell them to put IPS in-line and say it won't cause any network impact

Comment: *

Name: *

Email: *

Verification: *

SCENARIO: A CISO has several two-factor authentication systems under review and selects the one that is most sufficient and least costly. The implementation project planning is completed and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization's needs.
The CISO discovers the scalability issue will only impact a small number of network segments. What is the next logical step to ensure the proper application of risk management methodology within the two-facto implementation project?

• A.Decide to accept the risk on behalf of the impacted business units
• B.Create new use cases for operational use of the solution
• C.Report the deficiency to the audit team and create process exceptions Scenario8
• D.Determine if sufficient mitigating controls can be applied

Comment: *

Name: *

Email: *

Verification: *

The security team has investigated the theft/loss of several unencrypted laptop computers containing sensitive corporate information. To prevent the loss of any additional corporate data it is unilaterally decided by the CISO that all existing and future laptop computers will be encrypted. Soon, the help desk is flooded with complaints about the slow performance of the laptops and users are upset. What did the CISO do wrong? (choose the BEST answer):

• A.Used hardware encryption instead of software encryption
• B.Deployed the encryption solution in an inadequate manner
• C.Used 1024 bit encryption when 256 bit would have sufficed
• D.Failed to identify all stakeholders and their needs

Comment: *

Name: *

Email: *

Verification: *