The PRIMARY focus of the change control process is to ensure that changes are:

• A.authorized.
• B.applied.
• C.documented.
• D.tested.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important security feature an information security manager would need for a mobile device management (MDM) program?

• A.Ability to locate devices
• B.Ability to push updates to devices
• C.Ability to remotely wipe devices
• D.Ability to inventory devices

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be the FIRST step to ensure system updates are applied in a timely manner?

• A.Run a patch management scan to discover which patches are missing from each machine.
• B.Create a regression test plan to ensure business operation is not interrupted.
• C.Cross-reference all missing patches to establish the date each patch was introduced.
• D.Establish a risk-based assessment process for prioritizing patch implementation.

Comment: *

Name: *

Email: *

Verification: *

Isolation and containment measures for a compromised computer has been taken and information security management is now investigating. What is the MOST appropriate next step?

• A.Run a forensics tool on the machine to gather evidence
• B.Reboot the machine to break remote connections
• C.Make a copy of the whole system's memory
• D.Document current connections and open Transmission Control Protocol/User Datagram Protocol (TCP/ I'DP) ports

Comment: *

Name: *

Email: *

Verification: *

An organization has purchased a security information and event management (SIEM) tool. Which of the following is MOST important to consider before implementation?

• A.Available technical support
• B.Reporting capabilities?
• C.Controls to be monitored
• D.The contract with the SIEM vendor

Comment: *

Name: *

Email: *

Verification: *