Which of the following would help to change an organization's security culture?

• A.Develop procedures to enforce the information security policy
• B.Obtain strong management support
• C.Implement strict technical security controls
• D.Periodically audit compliance with the information security policy

Comment: *

Name: *

Email: *

Verification: *

What is the BEST method to confirm that all firewall rules and router configuration settings are adequate?

• A.Periodic review of network configuration
• B.Review intrusion detection system (IDS) logs for evidence of attacks
• C.Periodically perform penetration tests
• D.Daily review of server logs for evidence of hacker activity

Comment: *

Name: *

Email: *

Verification: *

The MOST useful way to describe the objectives in the information security strategy is through:

• A.attributes and characteristics of the 'desired state."
• B.overall control objectives of the security program.
• C.mapping the IT systems to key business processes.
• D.calculation of annual loss expectations.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be a MAJOR consideration for an organization defining its business continuity plan (BCP) or disaster recovery program (DRP)?

• A.Setting up a backup site
• B.Maintaining redundant systems
• C.Aligning with recovery time objectives (RTOs)
• D.Data backup frequency

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important consideration when implementing an intrusion detection system (IDS)?

• A.Tuning
• B.Patching
• C.Encryption
• D.Packet filtering

Comment: *

Name: *

Email: *

Verification: *