Which of the following reports would provide the BEST overview of the progress of an information security program to senior management?

• A.Inventory of information technology security controls
• B.Key performance indicators (KPIs) related to security initiatives
• C.Results of the last penetration test
• D.Heat map of the current risk landscape

Comment: *

Name: *

Email: *

Verification: *

An organization has implemented a bring your own device (BYOD)} program. Witch of the following is the GREATEST risk to the organization?

• A.Device incompatibility
• B.Lack of nonrepudiation
• C.Data leakage
• D.Device theft

Comment: *

Name: *

Email: *

Verification: *

Which of the following steps in conducting a risk assessment should be performed FIRST?

• A.Identity business assets
• B.Identify business risks
• C.Assess vulnerabilities
• D.Evaluate key controls

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides the MOST essential input for the development of an information security strategy?

• A.Results of a technology risk assessment
• B.Results of an information security gap analysis
• C.Availability of capable information security resources
• D.Measurement of security performance against IT goals

Comment: *

Name: *

Email: *

Verification: *

When designing the technical solution for a disaster recovery site, the PRIMARY factor that should be taken into consideration is the:

• A.services delivery objective.
• B.recovery time objective (RTO).
• C.recovery window.
• D.maximum tolerable outage (MTO).

Comment: *

Name: *

Email: *

Verification: *