What is an appropriate frequency for updating operating system (OS) patches on production servers?

• A.During scheduled rollouts of new applications
• B.According to a fixed security patch management schedule
• C.Concurrently with quarterly hardware maintenance
• D.Whenever important security patches are released

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY reason for initiating a policy exception process is when:

• A.operations are too busy to comply.
• B.the risk is justified by the benefit.
• C.policy compliance would be difficult to enforce.
• D.users may initially be inconvenienced.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST critical activity to ensure the ongoing security of outsourced IT services?

• A.Provide security awareness training to the third-party provider's employees
• B.Conduct regular security reviews of the third-party provider
• C.Include security requirements in the service contract
• D.Request that the third-party provider comply with the organization's information security policy

Comment: *

Name: *

Email: *

Verification: *

BEST way to isolate corporate data stored on employee-owned mobile devices would be to implement:

• A.device encryption,
• B.a strong password policy
• C.two-factor authentication
• D.a sandbox environment

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY objective of a security steering group is to:

• A.ensure information security covers all business functions.
• B.ensure information security aligns with business goals.
• C.raise information security awareness across the organization.
• D.implement all decisions on security management across the organization.

Comment: *

Name: *

Email: *

Verification: *