Utilizing external resources for highly technical information security tasks allows an information security manager to:

• A.distribute technology risk.
• B.leverage limited resources.
• C.transfer business risk.
• D.outsource responsibility.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST effective solution for preventing individuals external to the organization from modifying sensitive information on a corporate database?

• A.Screened subnets
• B.Information classification policies and procedures
• C.Role-based access controls
• D.Intrusion detection system (IDS)

Comment: *

Name: *

Email: *

Verification: *

An organization has decided to store production data in a cloud environment. What should be the FIRST consideration?

• A.Data isolation
• B.Data transfer
• C.Data classification
• D.Data backup

Comment: *

Name: *

Email: *

Verification: *

The service level agreement (SLA) for an outsourced IT function does not reflect an adequate level of protection. In this situation an information security manager should:

• A.ensure the provider is made liable for losses.
• B.recommend not renewing the contract upon expiration.
• C.recommend the immediate termination of the contract.
• D.determine the current level of security.

Comment: *

Name: *

Email: *

Verification: *

The cost of implementing a security control should not exceed the:

• A.annualized loss expectancy.
• B.cost of an incident.
• C.asset value.
• D.implementation opportunity costs.

Comment: *

Name: *

Email: *

Verification: *