The business continuity policy should contain which of the following?

• A.Emergency call trees
• B.Recovery criteria
• C.Business impact assessment (BIA)
• D.Critical backups inventory

Comment: *

Name: *

Email: *

Verification: *

A risk assessment study carried out by an organization noted that there is no segmentation of the local area network (LAN). Network segmentation would reduce the potential impact of which of the following?

• A.Denial of service (DoS) attacks
• B.Traffic sniffing
• C.Virus infections
• D.IP address spoofing

Comment: *

Name: *

Email: *

Verification: *

Which of the following MUST happen immediately following the identification of a malware incident?

• A.Preparation
• B.Eradication
• C.Containment
• D.Recovery

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY objective of a security steering group is to:

• A.ensure information security covers all business functions.
• B.ensure information security aligns with business goals.
• C.raise information security awareness across the organization.
• D.implement all decisions on security management across the organization.

Comment: *

Name: *

Email: *

Verification: *

Calculation of the recovery time objective (RTO) is necessary to determine the:

• A.point of synchronization
• B.priority of restoration.
• C.time required to restore files.
• D.annual loss expectancy (ALE)

Comment: *

Name: *

Email: *

Verification: *