Which of the following is the MOST important reason to identify and classify the sensitivity of assets?

• A.To assign appropriate controls
• B.To determine the scope of the information security program
• C.To reduce the cost of protective controls
• D.To allocate the information security program budget

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be the FIRST step when creating an organization's bring your own device (BYOD) program?

• A.identify data to be stored on the device
• B.Develop an acceptable use policy.
• C.Develop employee training.
• D.Pretest approved devices

Comment: *

Name: *

Email: *

Verification: *

When building a corporate-wide business continuity plan, it is discovered there are two separate lines of business systems that could be impacted by the same threat. Which of the following is the BEST method to determine the priority of system recovery in the event of a disaster?

• A.Evaluating the cost associated with each system's outage
• B.Reviewing the business plans of each department
• C.Comparing the recovery point objectives
• D.Reviewing each system's key performance indicators

Comment: *

Name: *

Email: *

Verification: *

An organization has recently experienced unauthorized device access to its network. To proactively manage the problem and mitigate this risk, the BEST preventive control would be to:

• A.keep an inventory of network and hardware addresses of all systems connected to the network.
• B.install a stateful inspection firewall to prevent unauthorized network traffic.
• C.implement network-level authentication and login to regulate access of devices to the network.
• D.deploy an automated asset inventory discovery tool to identify devices that access the network.

Comment: *

Name: *

Email: *

Verification: *

When collecting admissible evidence, which of the following is the MOST important requirement?

• A.Need to know
• B.Preserving audit logs
• C.Due diligence
• D.Chain of custody

Comment: *

Name: *

Email: *

Verification: *