When an organization hires a new information security manager, which of the following goals should this individual pursue FIRST?

• A.Develop a security architecture
• B.Establish good communication with steering committee members
• C.Assemble an experienced staff
• D.Benchmark peer organizations

Comment: *

Name: *

Email: *

Verification: *

An incident was detected where customer records were altered without authorization. The GREATEST concern for forensic analysis would be that the log data:

• A.has been disclosed.
• B.may not be time-synchronized.
• C.may be modified.
• D.could be temporarily available.

Comment: *

Name: *

Email: *

Verification: *

A core business unit relies on an effective legacy system that does not meet the current security standards and threatens the enterprise network. Which of the following is the BEST course of action to address the situation?

• A.Document the deficiencies in the risk register.
• B.Disconnect the legacy system from the rest of the network.
• C.Require that new systems that can meet the standards be implemented.
• D.Develop processes to compensate for the deficiencies.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be done FIRST when implementing policies to address an upcoming new data privacy regulation?

• A.Prohibit further collection of personal data until the regulation is implemented.
• B.Segregate systems processing personal data from other systems on the network-
• C.Understand which types of personal data are covered by the new regulation.
• D.Understand what technologies are required for personal data protection.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST protects against phishing attacks?

• A.Application whitelisting
• B.Security strategy training
• C.Network encryption
• D.Email filtering

Comment: *

Name: *

Email: *

Verification: *