Which of the following terms and conditions represent a significant deficiency if included in a commercial hot site contract?

• A.A hot site facility will be shared in multiple disaster declarations
• B.All equipment is provided "at time of disaster, not on floor"
• C.The facility is subject to a "first-come, first-served" policy
• D.Equipment may be substituted with equivalent model

Comment: *

Name: *

Email: *

Verification: *

Information security policies should PRIMARILY reflect:

• A.data security standards.
• B.compliance requirements,
• C.senior management intent.
• D.industry best practices.

Comment: *

Name: *

Email: *

Verification: *

What is the BEST way to ensure that an intruder who successfully penetrates a network will be detected before significant damage is inflicted?

• A.Perform periodic penetration testing
• B.Establish minimum security baselines
• C.Implement vendor default settings
• D.Install a honeypot on the network

Comment: *

Name: *

Email: *

Verification: *

A risk management approach to information protection is:

• A.managing risks to an acceptable level, commensurate with goals and objectives.
• B.accepting the security posture provided by commercial security products.
• C.implementing a training program to educate individuals on information protection and risks.
• D.managing risk tools to ensure that they assess all information protection vulnerabilities.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST supports the incident management process for attacks on an organization' s supply chain?

• A.Requiring security awareness training for vendor staff
• B.Establishing communication paths with vendors
• C.Performing integration testing with vendor systems
• D.Including service level agreements (SLAs) in vendor contracts

Comment: *

Name: *

Email: *

Verification: *