Which of the following would present the GREATEST risk to information security?

• A.Virus signature files updates are applied to all servers every day
• B.Security access logs are reviewed within five business days
• C.Critical patches are applied within 24 hours of their release
• D.Security incidents are investigated within five business days

Comment: *

Name: *

Email: *

Verification: *

The MOST basic requirement for an information security governance program is to:

• A.be aligned with the corporate business strategy.
• B.be based on a sound risk management approach.
• C.provide adequate regulatory compliance.
• D.provide best practices for security- initiatives.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important action to take when engaging third-party consultants to conduct an attack and penetration test?

• A.Request a list of the software to be used
• B.Provide clear directions to IT staff
• C.Monitor intrusion detection system (IDS) and firewall logs closely
• D.Establish clear rules of engagement

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important for an information security manager to verify before conducting full- functional continuity testing?

• A.Risk acceptance by the business has been documented.
• B.Incident response and recovery plans are documented in simple language.
• C.Teams and individuals responsible for recovery have been identified.
• D.Copies of recovery and incident response plans are kept offsite.

Comment: *

Name: *

Email: *

Verification: *

The MOST important reason for an information security manager to be involved in the change management process is to ensure that:

• A.security controls are updated regularly.
• B.potential vulnerabilities are identified.
• C.risks have been evaluated.
• D.security controls drive technology changes.

Comment: *

Name: *

Email: *

Verification: *