A security awareness program should:

• A.present top management's perspective.
• B.address details on specific exploits.
• C.address specific groups and roles.
• D.promote security department procedures.

Comment: *

Name: *

Email: *

Verification: *

In order to highlight to management, the importance of integrating information security in the business processes, a newly hired information security officer should FIRST:

• A.prepare a security budget.
• B.conduct a risk assessment.
• C.develop an information security policy.
• D.obtain benchmarking information.

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides the BKST confirmation that the business continuity/disaster recovery plan objectives have been achieved?

• A.The recovery time objective (RTO) was not exceeded during testing
• B.Objective testing of the business continuity/disaster recovery plan has been carried out consistently
• C.The recovery point objective (RPO) was proved inadequate by disaster recovery plan testing
• D.Information assets have been valued and assigned to owners per the business continuity plan, disaster recovery plan

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST effective approach of delivering security incident response training?

• A.Provide on-the-job training and mentoring for the incident response team.
• B.Perform role-playing exercises to simulate real-world incident response scenarios.
• C.Engage external consultants to present real-world examples within the industry.
• D.Include incident response training within new staff orientation.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST reliable way to ensure network security incidents are Identified as soon as possible'

• A.Collect and correlate IT Infrastructure event logs
• B.Tram help desk staff to identify and prioritize security incidents
• C.Install stateful inspection firewalls
• D.Conduct workshops and training sessions with end users.

Comment: *

Name: *

Email: *

Verification: *