Which of the following is the MOST important consideration for an organization interacting with the media during a disaster?

• A.Communicating specially drafted messages by an authorized person
• B.Refusing to comment until recovery
• C.Referring the media to the authorities
• D.Reporting the losses and recovery strategy to the media

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides the MOST useful information for identifying security control gaps on an application server?

• A.Penetration testing
• B.Internal audit reports
• C.Risk assessments
• D.Threat models

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST determines an information asset's classification?

• A.Directives from the data owner
• B.Criticality to a business process
• C.Value of the information asset to competitors
• D.Cost of producing the information asset

Comment: *

Name: *

Email: *

Verification: *

Which of the following metrics is the BEST indicator of an abuse of the change management process that could compromise information security?

• A.Small number of change request
• B.Large percentage decrease in monthly change requests
• C.Percentage of changes that include post-approval supplemental add-ons
• D.High ratio of lines of code changed to total lines of code

Comment: *

Name: *

Email: *

Verification: *

Because of its importance to the business, an organization wants to quickly implement a technical solution which deviates from the company's policies. An information security manager should:

• A.conduct a risk assessment and allow or disallow based on the outcome.
• B.recommend a risk assessment and implementation only if the residual risks are accepted.
• C.recommend against implementation because it violates the company's policies.
• D.recommend revision of current policy.

Comment: *

Name: *

Email: *

Verification: *