Which of the following is the MOST effective way to mitigate the risk of data loss in the event of a stolen laptop?

• A.Deploying end-point data loss prevention software on the laptop
• B.Utilizing a strong password
• C.Encrypting the hard drive
• D.Providing end-user awareness training focused on traveling with laptops

Comment: *

Name: *

Email: *

Verification: *

Which of the following will BEST ensure that risk is evaluated on system level changes?

• A.Security should be integrated in the change control process.
• B.Senior management must sign-off on changes.
• C.Implement a centralized change management system.
• D.System development staff receives regular security training.

Comment: *

Name: *

Email: *

Verification: *

A risk analysis for a new system is being performed.
For which of the following is business knowledge MORE important than IT knowledge?

• A.Vulnerability analysis
• B.Balanced scorecard
• C.Cost-benefit analysis
• D.Impact analysis

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST effective in preventing weaknesses from being introduced into existing production systems?

• A.Patch management
• B.Change management
• C.Security baselines
• D.Virus detection

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be determined FIRST when preparing a risk communication plan?

• A.Reporting frequency
• B.Target audience
• C.Reporting content
• D.Communication channel

Comment: *

Name: *

Email: *

Verification: *