Which of the following are the MOST important criteria when selecting virus protection software?

• A.Product market share and annualized cost
• B.Ability to interface with intrusion detection system (IDS) software and firewalls
• C.Alert notifications and impact assessments for new viruses
• D.Ease of maintenance and frequency of updates

Comment: *

Name: *

Email: *

Verification: *

Which of the following defines the minimum security requirements that a specific system must meet?

• A.Security policy
• B.Security procedure
• C.Security baseline
• D.Security guideline

Comment: *

Name: *

Email: *

Verification: *

Primary direction on the impact of compliance with new regulatory requirements that may lead to major application system changes should be obtained from the:

• A.corporate internal auditor.
• B.System developers/analysts.
• C.key business process owners.
• D.corporate legal counsel.

Comment: *

Name: *

Email: *

Verification: *

An information security manager has been assigned to implement more restrictive preventive controls. By doing so, the net effect will be to PRIMARILY reduce the:

• A.threat.
• B.loss.
• C.vulnerability.
• D.probability.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would BEST assist an information security manager in measuring the existing level of development of security processes against their desired state?

• A.Security audit reports
• B.Balanced scorecard
• C.Capability maturity model (CMM)
• D.Systems and business security architecture

Comment: *

Name: *

Email: *

Verification: *