When an information security manager is developing a strategic plan for information security, the timeline for the plan should be:

• A.aligned with the IT strategic plan.
• B.based on the current rate of technological change.
• C.three-to-five years for both hardware and software.
• D.aligned with the business strategy.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be the BEST indicator that an organization is appropriately managing risk?

• A.The number of security incident events reported by staff has increased
• B.Risk assessment results are within tolerance
• C.A penetration test does not identify any high-risk system vulnerabilities
• D.The number of events reported from the intrusion detection system has declined

Comment: *

Name: *

Email: *

Verification: *

The BEST method for detecting and monitoring a hacker's activities without exposing information assets to unnecessary risk is to utilize:

• A.firewalls.
• B.bastion hosts.
• C.decoy files.
• D.screened subnets.

Comment: *

Name: *

Email: *

Verification: *

An information security strategy document that includes specific links to an organization's business activities is PRIMARILY an indicator of:

• A.performance measurement.
• B.integration.
• C.alignment.
• D.value delivery.

Comment: *

Name: *

Email: *

Verification: *

An advantage of antivirus software schemes based on change detection is that they have:

• A.a chance of detecting current and future viral strains.
• B.to be updated less frequently than activity monitors.
• C.a more flexible directory of viral signatures.
• D.the highest probability of avoiding false alarms.

Comment: *

Name: *

Email: *

Verification: *