Which of the following is MOST important to the successful promotion of good security management practices?

• A.Security metrics
• B.Security baselines
• C.Management support
• D.Periodic training

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the PRIMARY responsibility of the information security steering committee?

• A.Developing and presenting business cases for security initiatives
• B.Identifying risks associated with new security initiatives
• C.Developing security policies aligned with the corporate and IT strategies
• D.Reviewing business cases where benefits have not been realized

Comment: *

Name: *

Email: *

Verification: *

An organization s senior management is encouraging employees to use social media for promotional purposes. Which of t following should be the information security manager's FIRST step to support this strategy?

• A.Employ the use of a web content filtering solution.
• B.Incorporate social media into the security awareness program.
• C.Develop a business case for a data toss prevention (DLP) solution.
• D.Develop a guideline on the acceptable use of social media

Comment: *

Name: *

Email: *

Verification: *

After detecting an advanced persistent threat (APT), which of the following should be the information security manager's FIRST step?

• A.Perform root-cause analysis
• B.Notify management
• C.Contain the threat
• D.Remove the threat

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be the FIRST step in establishing an information security program?

• A.Develop the security policy.
• B.Develop security operating procedures.
• C.Develop the security plan.
• D.Conduct a security controls study.

Comment: *

Name: *

Email: *

Verification: *