A business previously accepted the risk associated with a zero-day vulnerability The same vulnerability was recently exploited in a high-profile attack on another organization m the same Industry Which of the following should be the information security manager's FIRST course of action?

• A.Evaluate the cost of remediating the vulnerability
• B.Develop best and worst case scenarios
• C.Reassess the risk in terms of likelihood and impact
• D.Report the breach of the other organization to senior management

Comment: *

Name: *

Email: *

Verification: *

A company has purchased a rival organization and is looking to integrate security strategies. Which of the following is the GREATEST issue to consider?

• A.Differing security skills within the organizations
• B.The organizations have different risk appetites
• C.Confidential information could be leaked
• D.Differing security technologies

Comment: *

Name: *

Email: *

Verification: *

Which of the following metrics BEST demonstrates the effectiveness of an organization's security awareness strategy?

• A.Trends in mean time to resolution of security incidents
• B.Percentage of end user computers and devices infected with malware
• C.Pass rate of knowledge assessments completed after end user security training
• D.Number of security incidents reported to the help desk

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important factor when designing information security architecture?

• A.Technical platform interfaces
• B.Scalability of the network
• C.Development methodologies
• D.Stakeholder requirements

Comment: *

Name: *

Email: *

Verification: *

An organization is considering moving lo a cloud service provider for the storage of sensitive data Which of the following .... consideration FIRST?

• A.Right to terminate clauses In the contract
• B.Requirements for data encryption
• C.Results of the cloud provider's control report
• D.A destruction-of-data clause m the contract

Comment: *

Name: *

Email: *

Verification: *