Which of the following is the MOST appropriate method of ensuring password strength in a large organization?

• A.Attempt to reset several passwords to weaker values
• B.Install code to capture passwords for periodic audit
• C.Sample a subset of users and request their passwords for review
• D.Review general security settings on each platform

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides the BEST evidence that the information security program is aligned to the business strategy?

• A.The information security team is able to provide key performance indicators (KPIs) to senior management.
• B.The information security program manages risk within the business1* risk tolerance.
• C.Business senior management supports the information security policies.
• D.Information security initiatives are directly correlated to business processes.

Comment: *

Name: *

Email: *

Verification: *

For virtual private network (VPN) access to the corporate network, the information security manager is requiring strong authentication. Which of the following is the strongest method to ensure that logging onto the network is secure?

• A.Biometrics
• B.Symmetric encryption keys
• C.Secure Sockets Layer (SSL)-based authentication
• D.Two-factor authentication

Comment: *

Name: *

Email: *

Verification: *

Organization XYZ. a lucrative, Internet-only business, recently suffered a power outage that lasted 2 hours.
The organization s data center was unavailable in the interim. In order to mitigate risk in the MOST cost-efficient manner, the organization should:

• A.set up a duplicate business center in a geographically separate area.
• B.create an FT hot site with immediate fail-over capability.
• C.install an uninterruptible power supply (UPS) and generator.
• D.plan to operate at a reduced capacity from the primary place of business.

Comment: *

Name: *

Email: *

Verification: *

Which of the following MUST be established before implementing a data loss prevention (DLP) system?

• A.Privacy impact assessment
• B.A data backup policy
• C.A data recovery policy
• D.Data classification

Comment: *

Name: *

Email: *

Verification: *