Senior management has decided to accept a significant risk within a security remediation plan.
Which of the following is the information security manager's BEST course of action?

• A.Remediate the risk and document the rationale.
• B.Update the risk register with the risk acceptance.
• C.Communicate the remediation plan to the board of directors.
• D.Report the risk acceptance to regulatory agencies.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is an example of a corrective control?

• A.Diverting incoming traffic upon responding to the denial of service (DoS) attack
• B.Filtering network traffic before entering an internal network from outside
• C.Examining inbound network traffic for viruses
• D.Logging inbound network traffic

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the PRIMARY reason for implementing a risk management program?

• A.Allows the organization to eliminate risk
• B.Is a necessary part of management's due diligence
• C.Satisfies audit and regulatory requirements
• D.Assists in incrementing the return on investment (ROD

Comment: *

Name: *

Email: *

Verification: *

An organization faces severe fines and penalties if not in compliance with local regulatory requirements by an established deadline. Senior management has asked the information security manager to prepare an action plan to achieve compliance. Which of the following would provide the MOST useful information for planning purposes?

• A.Results from a gap analysis
• B.Results from a business impact analysis
• C.Deadlines and penalties for noncompliance
• D.An inventory of security controls currently in place

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the GREATEST benefit of information asset classification to an organization?

• A.It demonstrates the value of information assets for financial reporting.
• B.It measures qualitative value of the information.
• C.It helps to minimize the cost of regulatory compliance efforts
• D.It helps to optimize the investment in protecting information assets.

Comment: *

Name: *

Email: *

Verification: *