To ensure IT equipment meets organizational security standards, the MOST efficient approach is to:

• A.assess the risks of all new equipment.
• B.assess security during equipment deployment.
• C.ensure compliance during user acceptance testing.
• D.develop an approved equipment list.

Comment: *

Name: *

Email: *

Verification: *

Why is "slack space" of value to an information security manager as pan of an incident investigation?

• A.Hidden data may be stored there
• B.The slack space contains login information
• C.Slack space is encrypted
• D.It provides flexible space for the investigation

Comment: *

Name: *

Email: *

Verification: *

An IS manager has decided to implement a security system to monitor access to the Internet and prevent access to numerous sites. Immediately upon installation, employees Hood the IT helpdesk with complaints of being unable to perform business functions on Internet sites. This is an example of:

• A.conflicting security controls with organizational needs.
• B.strong protection of information resources.
• C.implementing appropriate controls to reduce risk.
• D.proving information security's protective abilities.

Comment: *

Name: *

Email: *

Verification: *

When a significant security breach occurs, what should be reported FIRST to senior management?

• A.A summary of the security logs that illustrates the sequence of events
• B.An explanation of the incident and corrective action taken
• C.An analysis of the impact of similar attacks at other organizations
• D.A business case for implementing stronger logical access controls

Comment: *

Name: *

Email: *

Verification: *

An organization's information security strategy should be based on:

• A.managing risk relative to business objectives.
• B.managing risk to a zero level and minimizing insurance premiums.
• C.avoiding occurrence of risks so that insurance is not required.
• D.transferring most risks to insurers and saving on control costs.

Comment: *

Name: *

Email: *

Verification: *