Which of the following is the MOST effective way to reduce risk to an organization from widespread use of
web-based communication technologies?

• A.Publish an enterprise-wide policy outlining acceptance use of web-based communication technologies.
• B.Incorporate risk awareness training for web-based communications into the IT security program.
• C.Monitor staff usage of web-based communication and notify the IT security department of violations.
• D.Block access from user devices to unauthorized pages that allow web-based communication.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST source of information for examining the classification of new data?

• A.Security policy requirements
• B.Risk assessment results
• C.Input by data custodians
• D.Current level of protection

Comment: *

Name: *

Email: *

Verification: *

An IS auditor is told by IS management that the organization has recently reached the highest level of the
software capability maturity model (CMM). The software quality process MOST recently added by the
organization is:

• A.continuous improvement.
• B.quantitative quality goals.
• C.a documented process.
• D.a process tailored to specific projects.

Comment: *

Name: *

Email: *

Verification: *

The BEST data backup strategy for mobile users is to:

• A.synchronize data directories automatically over the network.
• B.have them regularly back up data directories onto CD and courier the backups to the head office.
• C.mirror all data to a portable storage device.
• D.have them regularly go to branch offices to perform backups.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important reason for logging firewall activity?

• A.Intrusion detection
• B.Auditing purposes
• C.Firewall tuning
• D.Incident investigation

Comment: *

Name: *

Email: *

Verification: *