Which of the following situations would be the MOST concern to a security manager?

• A.Audit logs are not enabled on a production server
• B.The logon ID for a terminated systems analyst still exists on the system
• C.The help desk has received numerous results of users receiving phishing e-mails
• D.A Trojan was found to be installed on a system administrator's laptop

Comment: *

Name: *

Email: *

Verification: *

Which of the following recovery strategies has the GREATEST chance of failure?

• A.Hot site
• B.Redundant site
• C.Reciprocal arrangement
• D.Cold site

Comment: *

Name: *

Email: *

Verification: *

To implement effective continuous monitoring of IT controls, an information security manager needs to FIRST ensure:

• A.information assets have been classified.
• B.periodic scanning of IT systems is in place.
• C.security alerts are centralized.
• D.metrics are communicated to senior management.

Comment: *

Name: *

Email: *

Verification: *

What is the GREATEST benefit of classifying assets based on sensitivity?

• A.The organization can allocate appropriate levels of protection.
• B.Data is available to appropriately assign asset ownership.
• C.Staff can create more realistic risk scenarios.
• D.The organization is in compliance with regulatory guidelines.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST indicates senior management support for an information security program?

• A.Detailed information security policies are established and regularly reviewed.
• B.The information security manager meets regularly with the lines of business.
• C.Key performance indicators (KPIs) are defined for the information security program.
• D.Risk assessments are conducted frequently by the information security team.

Comment: *

Name: *

Email: *

Verification: *