During the initiation phase of the system development life cycle (SDLC) for a software project, information security activities should address:

• A.baseline security controls.
• B.cost-benefit analyses.
• C.security objectives.
• D.benchmarking security metrics.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST serious exposure of automatically updating virus signature files on every desktop each Friday at 11:00 p.m. (23.00 hrs.)?

• A.Most new viruses* signatures are identified over weekends
• B.Technical personnel are not available to support the operation
• C.Systems are vulnerable to new viruses during the intervening week
• D.The update's success or failure is not known until Monday

Comment: *

Name: *

Email: *

Verification: *

What is the PRIMARY purpose of communicating business impact to an incident response team?

• A.To provide information for communication of incidents
• B.To provide monetary values for post-incident review
• C.To enable effective prioritization of incidents
• D.To facilitate resource allocation tor preventive measures

Comment: *

Name: *

Email: *

Verification: *

An organization is planning to open a new office in another country. Sensitive data will be routinely sent between two offices. What should be the information security manager's FIRST course of action?

• A.Identify applicable regulatory requirements to establish security policies.
• B.Update privacy policies to include the other country's laws and regulations.
• C.Apply the current corporate security policies to the new office.
• D.Encrypt the data for transfer to the head office based on security manager approval.

Comment: *

Name: *

Email: *

Verification: *

An information security team is investigating an alleged breach of an organization's network. Which of the following would be the BEST single source of evidence to review?

• A.File integrity monitoring (FIM) software.
• B.Antivirus software
• C.Security information and event management (SIEM) tool
• D.Intrusion detection system (IDS)

Comment: *

Name: *

Email: *

Verification: *