Which of the following is the MOST important to ensure a successful recovery?

• A.Backup media is stored offsite
• B.Recovery location is secure and accessible
• C.More than one hot site is available
• D.Network alternate links are regularly tested

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important reason for performing a risk analysis?

• A.Promoting increased security awareness in the organization
• B.Assigning the appropriate level of protection
• C.Identifying critical information assets
• D.Identifying and eliminating threats

Comment: *

Name: *

Email: *

Verification: *

An Information security risk analysis BEST assists an organization in ensuring that;

• A.cost-effective decisions are made with regard to which assets need protection
• B.the infrastructure has the appropriate level of access control
• C.an appropriate level of funding is applied to security processes
• D.the organization implements appropriate security technologies

Comment: *

Name: *

Email: *

Verification: *

Senior management has decided to accept a significant risk within a security remediation plan. Which of the following is the information security manager's BEST course of action?

• A.Update the risk register with the risk acceptance.
• B.Remediate the risk and document the rationale.
• C.Report the risk acceptance to regulatory agencies.
• D.Communicate the remediation plan to the board of directors.

Comment: *

Name: *

Email: *

Verification: *

During a review to approve a penetration test plan, which of the following should be an information security manager's PRIMARY concern?

• A.Penetration test team's deviation from scope
• B.Unauthorized access to administrative utilities
• C.False positive alarms to operations staff
• D.Impact on production systems

Comment: *

Name: *

Email: *

Verification: *