A multinational organization operating in fifteen countries is considering implementing an information security program. Which factor will MOST influence the design of the Information security program?

• A.Representation by regional business leaders
• B.Composition of the board
• C.Cultures of the different countries
• D.IT security skills

Comment: *

Name: *

Email: *

Verification: *

When implementing security controls, an information security manager must PRIMARILY focus on:

• A.minimizing operational impacts.
• B.eliminating all vulnerabilities.
• C.usage by similar organizations.
• D.certification from a third party.

Comment: *

Name: *

Email: *

Verification: *

During a security assessment, an information security manager finds a number of security patches were not installed on a server hosting a critical business application. The application owner did not approve the patch installation to avoid interrupting the application. Which of the following should be the information security manager's FIRST course of action?

• A.Escalate the risk to senior management.
• B.Report the risk to the information security steering committee.
• C.Communicate the potential impact to the application owner.
• D.Determine mitigation options with IT management

Comment: *

Name: *

Email: *

Verification: *

The impact of losing frame relay network connectivity for 18-24 hours should be calculated using the:

• A.hourly billing rate charged by the carrier.
• B.value of the data transmitted over the network.
• C.aggregate compensation of all affected business users.
• D.financial losses incurred by affected business units.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is an example of a deterrent control?

• A.a warning banner
• B.An intrusion detection system (IDS)
• C.Periodic data restoration
• D.Segregation of responsibilities

Comment: *

Name: *

Email: *

Verification: *