An incident response team has determined there is a need to isolate a system that is communicating with a known malicious host on the Internet, following stakeholders should be contacted FIRST?

• A.The business owner
• B.System administrator
• C.Executive management
• D.Key customers

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST effective in preventing security weaknesses in operating systems?

• A.Patch management
• B.Change management
• C.Security baselines
• D.Configuration management

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important element in the evaluation of inherent security risks?

• A.Impact to the organization
• B.Residual risk
• C.Cast of countermeasures
• D.Control effectiveness

Comment: *

Name: *

Email: *

Verification: *

A recent phishing attack investigation showed that several employees had used their work email addresses to create personal accounts on a shopping site that had been breached. What is the BEST way to prevent this

• A.Send periodic fake phishing emails to employees and track responses.
• B.Conduct information security awareness training for employees.
• C.Block personal shopping sites using proxy filtering.
• D.Update the incident response plan to address this situation.

Comment: *

Name: *

Email: *

Verification: *

An emergency change was made to an IT system as a result of a failure. Which of the following should be of GREATEST concern to the organizations information security manager?

• A.Documentation of the change was made after implementation.
• B.The information security manager did not review the change prior to implementation.
• C.The change did not include a proper assessment of risk.
• D.The operations team implemented the change without regression testing,

Comment: *

Name: *

Email: *

Verification: *