Which of the following is the BEST evidence that proper security monitoring controls are in place?

• A.Mature escalation procedures are in place for incidents
• B.The intrusion detection system (IDS) generates potential alerts.
• C.Incidents are contained before they cause damage
• D.Staff regularly report suspicious activity.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should occur FIRST in the process of managing security risk associated with the transfer of data from unsupported legacy systems to supported systems?

• A.Assign owners to be responsible for the transfer of each asset.
• B.Increase cyber insurance coverage.
• C.Make backups of the affected systems prior to transfer.
• D.Identify all information assets in the legacy environment.

Comment: *

Name: *

Email: *

Verification: *

The MOST important reason that statistical anomaly-based intrusion detection systems (slat IDSs) are less commonly used than signature-based IDSs, is that stat IDSs:

• A.create more overhead than signature-based IDSs.
• B.cause false positives from minor changes to system variables.
• C.generate false alarms from varying user or system actions.
• D.cannot detect new types of attacks.

Comment: *

Name: *

Email: *

Verification: *

Senior management is alarmed by recent media reports of severe security incidents at competing organizations Which of the following would provide the BEST assurance that the organization's current security measures are performing adequately?

• A.Review the intrusion detection system (IDS) logs
• B.Review the intrusion prevention system (IPS) logs
• C.Require internal penetration testing
• D.Require third-party penetration testing

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides the BEST opportunity to evaluate the capabilities of incident response team members?

• A.Disaster recovery exercise
• B.Black box penetration test
• C.Breach simulation exercise
• D.Tabletop test

Comment: *

Name: *

Email: *

Verification: *