Which of the following is the MOST effective data loss control when connecting a personally owned mobile device to the corporate email system?

• A.Email must be stored in an encrypted format on the mobile device.
• B.Email synchronization must be prevented when connected to a public Wi-Fi hotspot.
• C.A senior manager must approve each connection.
• D.Users must agree to allow the mobile device to be wiped if it is lost.

Comment: *

Name: *

Email: *

Verification: *

In a multinational organization, local security regulations should be implemented over global security policy because:

• A.global security policies include unnecessary controls for local businesses
• B.deploying awareness of local regulations is more practical than of global policy.
• C.requirements of local regulations take precedence
• D.business objectives are defined by local business unit managers.

Comment: *

Name: *

Email: *

Verification: *

An organization has to comply with recently published industry regulatory requirements-compliance that potentially has high implementation costs. What should the information security manager do FIRST?

• A.Implement a security committee.
• B.Perform a gap analysis.
• C.Implement compensating controls.
• D.Demand immediate compliance.

Comment: *

Name: *

Email: *

Verification: *

When facilitating the alignment of corporate governance and information security governance, which of the following is the MOST important role of an organization's security steering committee?

• A.Obtaining support for the integration from business owners
• B.Defining metrics to demonstrate alignment
• C.Obtaining approval for the information security budget
• D.Evaluating and reporting the degree of integration

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important when deciding whether to build an alternate facility or subscribe to a third-party hot site?

• A.Cost to build a redundant processing facility and invocation
• B.Daily cost of losing critical systems and recovery time objectives (RTOs)
• C.Infrastructure complexity and system sensitivity
• D.Criticality results from the business impact analysis (BIA)

Comment: *

Name: *

Email: *

Verification: *