Which of the following is the MOST effective approach for delivering security incident response training?

• A.Provide on-the-job training and mentoring for the incident response team.
• B.Engage external consultants to present real-world examples within the industry.
• C.Include incident response training within new staff orientation.
• D.Perform role-playing exercises to simulate real-world incident response scenarios.

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY benefit of performing an information asset classification is to:

• A.link security requirements to business objectives.
• B.identify controls commensurate to risk.
• C.define access rights.
• D.establish ownership.

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY objective of a risk response strategy should be:

• A.senior management buy-in.
• B.regulatory compliance.
• C.threat reduction.
• D.appropriate control selection.

Comment: *

Name: *

Email: *

Verification: *

Senior management has endorsed a comprehensive information security policy. Which of the following should the organization do NEXT?

• A.Seek policy buy-in from business stakeholders.
• B.Identify relevant information security frameworks for adoption.
• C.Implement an authentication and authorization system.
• D.Promote awareness of the policy among employees.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important guideline when using software to scan for security exposures within a corporate network?

• A.Never use open source tools
• B.Focus only on production servers
• C.Follow a linear process for attacks
• D.Do not interrupt production processes

Comment: *

Name: *

Email: *

Verification: *