Which of the following would be the BEST defense against sniffing?

• A.Password protect the files
• B.Implement a dynamic IP address scheme
• C.Encrypt the data being transmitted
• D.Set static mandatory access control (MAC) addresses

Comment: *

Name: *

Email: *

Verification: *

When an organization hires a new information security manager, which of the following goals should this individual pursue FIRST?

• A.Develop a security architecture
• B.Establish good communication with steering committee members
• C.Assemble an experienced staff
• D.Benchmark peer organizations

Comment: *

Name: *

Email: *

Verification: *

The MAIN reason why asset classification is important to a successful information security program is because classification determines:

• A.the priority and extent of risk mitigation efforts.
• B.the amount of insurance needed in case of loss.
• C.the appropriate level of protection to the asset.
• D.how protection levels compare to peer organizations.

Comment: *

Name: *

Email: *

Verification: *

In the development of an information security strategy, recovery time objectives (RTOs) will serve as indicators of:

• A.maturity levels.
• B.open vulnerabilities.
• C.senior management support.
• D.risk tolerances.

Comment: *

Name: *

Email: *

Verification: *

An organization's information security processes are currently defined as ad hoc. In seeking to improve their performance level, the next step for the organization should be to:

• A.ensure that security processes are consistent across the organization.
• B.enforce baseline security levels across the organization.
• C.ensure that security processes are fully documented.
• D.implement monitoring of key performance indicators for security processes.

Comment: *

Name: *

Email: *

Verification: *