The success of a computer forensic investigation depends on the concept of:

• A.forensic chain
• B.chain of attack.
• C.chain of evidence.
• D.evidence of attack.

Comment: *

Name: *

Email: *

Verification: *

An organization wants to ensure its confidential data is isolated in a multi-tenanted environment at a well-known cloud service provider. Which of the following is the BEST way to ensure the data is adequately protected?

• A.Review the provider's information security policies and procedures.
• B.Ensure an audit of the provider is conducted to identify control gaps
• C.Verify the provider follows a cloud service framework standard.
• D.Obtain documentation of the encryption management practices.

Comment: *

Name: *

Email: *

Verification: *

An organization's operations staff places payment files in a shared network folder and then the disbursement staff picks up the files for payment processing. This manual intervention will be automated some months later, thus cost-efficient controls are sought to protect against file alterations. Which of the following would be the BEST solution?

• A.Design a training program for the staff involved to heighten information security awareness
• B.Set role-based access permissions on the shared folder
• C.The end user develops a PC macro program to compare sender and recipient file contents
• D.Shared folder operators sign an agreement to pledge not to commit fraudulent activities

Comment: *

Name: *

Email: *

Verification: *

After detecting an advanced persistent threat (APT), which of the following should be the information security manager's FIRST step?

• A.Notify management
• B.Contain the threat
• C.Remove the threat
• D.Perform root-cause analysis

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST course of action if the business activity residual risk is lower than the acceptable risk level?

• A.Monitor the effectiveness of controls.
• B.Review the risk probability and impact.
• C.Update the risk assessment framework.
• D.Review the inherent risk level.

Comment: *

Name: *

Email: *

Verification: *