Which of the following is the GREATEST risk to consider when a rival organization purchases a business unit within an organization?

• A.Access and permissions to the corporate network from the business unit will remain after the sale.
• B.Loss of corporate knowledge.
• C.The business unit's confidential information will be transferred to the rival organization during the separation.
• D.Senior business management will not understand technical risks.

Comment: *

Name: *

Email: *

Verification: *

Employees in a large multinational organization frequently travel among various geographic locations. Which type of authorization policy BEST addresses this practice?

• A.Multilevel
• B.Identity
• C.Role-based
• D.Discretionary

Comment: *

Name: *

Email: *

Verification: *

Which of the following areas is MOST susceptible to the introduction of security weaknesses?

• A.Database management
• B.Tape backup management
• C.Configuration management
• D.Incident response management

Comment: *

Name: *

Email: *

Verification: *

Reviewing which of the following would BEST ensure that security controls are effective?

• A.Risk assessment policies
• B.Return on security investment
• C.Security metrics
• D.User access rights

Comment: *

Name: *

Email: *

Verification: *

In a call center, the BEST reason to conduct a social engineering exercise is to:

• A.minimize the likelihood of successful attacks.
• B.improve password policy.
• C.gain funding (or information security initiatives.
• D.identify candidates for additional security training.

Comment: *

Name: *

Email: *

Verification: *