The PRIMARY reason for initiating a policy exception process is when:

• A.operations are too busy to comply.
• B.the risk is justified by the benefit.
• C.policy compliance would be difficult to enforce.
• D.users may initially be inconvenienced.

Comment: *

Name: *

Email: *

Verification: *

When an organization and its IT-hosting service provider are establishing a contract with each other, it is MOST important that the contract includes:

• A.details of expected security metrics.
• B.each party's security responsibilities.
• C.penalties for noncompliance with security policy.
• D.recovery time objectives (RTOs).

Comment: *

Name: *

Email: *

Verification: *

Employees in a large multinational organization frequently travel among various geographic locations. Which type of authorization policy BEST addresses this practice?

• A.Discretionary
• B.Role-based
• C.Multilevel
• D.Identity

Comment: *

Name: *

Email: *

Verification: *

How would an information security manager balance the potentially conflicting requirements of an international organization's security standards and local regulation?

• A.Give organization standards preference over local regulations
• B.Follow local regulations only
• C.Make the organization aware of those standards where local regulations causes conflicts
• D.Negotiate a local version of the organization standards

Comment: *

Name: *

Email: *

Verification: *

Simple Network Management Protocol v2 (SNMP v2) is used frequently to monitor networks. Which of the following vulnerabilities does il always introduce?

• A.Remote buffer overflow
• B.Cross site scripting
• C.Clear text authentication
• D.Man-in-the-middle attack

Comment: *

Name: *

Email: *

Verification: *