Which of the following would be MOST appropriate for collecting and preserving evidence?

• A.Encrypted hard drives
• B.Generic audit software
• C.Proven forensic processes
• D.Log correlation software

Comment: *

Name: *

Email: *

Verification: *

Once a suite of security controls has been successfully implemented for an organization's business units, it is MOST important for the information security manager to:

• A.perform testing to compare control performance against industry levels.
• B.hand over the controls to the relevant business owners.
• C.prepare to adapt the controls for future system upgrades.
• D.ensure the controls are regularly tested for ongoing effectiveness.

Comment: *

Name: *

Email: *

Verification: *

Which of the following threats is prevented by using token-based authentication?

• A.Session eavesdropping attack on the network
• B.Main-in-the middle attack on the client
• C.Password sniffing attack on the network
• D.Denial of service attack over the network

Comment: *

Name: *

Email: *

Verification: *

Which of the following techniques would be the BEST test of security effectiveness?

• A.Analyzing technical security practices
• B.Reviewing security logs
• C.Reviewing security policies and standards
• D.Performing an external penetration test

Comment: *

Name: *

Email: *

Verification: *

A multinational organization wants to monitor outbound traffic for data leakage from the use of unapproved cloud services. Which of the following should be the information security manager's GREATEST consideration when implementing this control?

• A.Security of cloud services
• B.Data privacy regulations
• C.Resistance from business users
• D.Allocation of monitoring resources

Comment: *

Name: *

Email: *

Verification: *