What is the role of the information security manager in finalizing contract negotiations with service providers?

• A.To update security standards for the outsourced process
• B.To ensure that clauses for periodic audits are included
• C.To obtain a security standard certification from the provider
• D.To perform a risk analysis on the outsourcing process

Comment: *

Name: *

Email: *

Verification: *

It is important to classify and determine relative sensitivity of assets to ensure that:

• A.cost of protection is in proportion to sensitivity.
• B.highly sensitive assets are protected.
• C.cost of controls is minimized.
• D.countermeasures are proportional to risk.

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY objective of an Internet usage policy is to prevent:

• A.access to inappropriate sites.
• B.downloading malicious code.
• C.violation of copyright laws.
• D.disruption of Internet access.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be performed FIRST in the aftermath of a denial-of-service attack?

• A.Restore servers from backup media stored offsite
• B.Conduct an assessment to determine system status
• C.Perform an impact analysis of the outage
• D.Isolate the screened subnet

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY reason for involving information security at each stage in the systems development life cycle (SDLC) is to identify the security implications and potential solutions required for:

• A.identifying vulnerabilities in the system.
• B.sustaining the organization's security posture.
• C.the existing systems that will be affected.
• D.complying with segregation of duties.

Comment: *

Name: *

Email: *

Verification: *