An organization has implemented an enterprise resource planning (ERP) system used by 500 employees from various departments. Which of the following access control approaches is MOST appropriate?

• A.Rule-based
• B.Mandatory
• C.Discretionary
• D.Role-based

Comment: *

Name: *

Email: *

Verification: *

An organization has introduced a new bring your own device (BYOD) program. The security manager has determined that a small number of employees are utilizing free cloud storage services to store company data through their mobile devices. Which of the following is the MOST effective course of action?

• A.Allow the practice to continue temporarily for monitoring purposes.
• B.Disable the employees' remote access to company email and data
• C.Initiate remote wipe of the devices
• D.Assess the business need to provide a secure solution

Comment: *

Name: *

Email: *

Verification: *

Which of the following would BEST help an information security manager justify the implementation ofa security information and event management (SIEM) system?

• A.Security benchmarks
• B.Results of a cost-benefit analysis
• C.Results of a risk assessment
• D.Results of a business impact analysis (BIA)

Comment: *

Name: *

Email: *

Verification: *

The BEST way to encourage good security practices is to:

• A.schedule periodic compliance audits.
• B.discipline those who fail to comply with the security policy.
• C.recognize appropriate security behavior by individuals.
• D.publish the information security policy.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to ensure information security metrics are meaningful?

• A.Using a dashboard to present the information security metrics
• B.Requiring information security metrics to be approved by senior management
• C.Aligning information security metrics with business drivers
• D.Correlating information security metrics to industry best practices

Comment: *

Name: *

Email: *

Verification: *