Which of the following is the BEST method to ensure the overall effectiveness of a risk management program?

• A.User assessments of changes
• B.Comparison of the program results with industry standards
• C.Assignment of risk within the organization
• D.Participation by all members of the organization

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a potential indicator of inappropriate Internet use by staff?

• A.Increased help desk calls for password resets
• B.Reduced number of pings on firewalls
• C.Increased reports of slow system performance
• D.Increased number of weakness from vulnerability scans

Comment: *

Name: *

Email: *

Verification: *

Of the following, who should have responsibility for assessing the security risk associated with an outsourced cloud provider contract?

• A.Information security manager
• B.Chief information officer
• C.Compliance manager
• D.Service delivery manager

Comment: *

Name: *

Email: *

Verification: *

The BEST way to justify the implementation of a single sign-on (SSO) product is to use:

• A.return on investment (ROD.
• B.a vulnerability assessment.
• C.annual loss expectancy (ALE).
• D.a business case.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be included in an annual information security budget that is submitted for management approval?

• A.A cost-benefit analysis of budgeted resources
• B.All of the resources that are recommended by the business
• C.Total cost of ownership (TCO)
• D.Baseline comparisons

Comment: *

Name: *

Email: *

Verification: *