An information security manager discovers that newly hired privileged users are not taking necessary steps to protect critical information at their workstations. Which of the following is the BEST way to address this situation?

• A.Publish an acceptable use policy and require signed acknowledgment.
• B.Communicate the responsibility and provide appropriate training.
• C.Turn on logging and record user activity.
• D.Implement a data loss prevention (DLP) solution.

Comment: *

Name: *

Email: *

Verification: *

An information security manager has been tasked with implementing a security awareness training program Which of this ..... have the MOST influence on the effectiveness of this program?

• A.Basing the training program on industry best practices
• B.Obtaining buy-in from senior management
• C.Tailoring the training to the organization's environment
• D.Obtaining buy-in from end users

Comment: *

Name: *

Email: *

Verification: *

Which of the following devices should be placed within a DMZ?

• A.Router
• B.Firewall
• C.Mail relay
• D.Authentication server

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST evidence that information security governance works as a business enabler?

• A.Business initiatives are within risk tolerance.
• B.Business initiatives are prioritized over security initiatives.
• C.Security key performance indicators (KPIs) are included in management briefings.
• D.Security initiatives have positive return on investment (ROI).

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST effective mitigation strategy to protect confidential information from insider threats?

• A.Performing an entitlement review process
• B.Implementing authentication mechanism
• C.Defining segregation of duties
• D.Establishing authorization controls

Comment: *

Name: *

Email: *

Verification: *