Which of the following would be the BEST way for a company 10 reduce the risk of data loss resulting from employee-owned devices accessing the corporate email system?

• A.Link the bring-your-own-device (BYOD) policy to the existing staff disciplinary policy.
• B.Require employees to install a reputable mobile anti-virus solution on their personal devices.
• C.Require employees to undergo training before permitting access to the corporate email service
• D.Use a mobile device management solution to isolate the local corporate email storage.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be an information security manager's BEST course of action upon learning a third-party cloud provider is not meeting information security with regard to data encryption?

• A.Report the risk to relevant stakeholders.
• B.Discontinue engagement with the cloud provider.
• C.Recommend compensating controls to mitigate the risk.
• D.Provide a date of remediation to the cloud provider.

Comment: *

Name: *

Email: *

Verification: *

For virtual private network (VPN) access to the corporate network, the information security manager is requiring strong authentication. Which of the following is the strongest method to ensure that logging onto the network is secure?

• A.Biometrics
• B.Symmetric encryption keys
• C.Secure Sockets Layer (SSL)-based authentication
• D.Two-factor authentication

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to prevent employees from making unauthorized comments to the media about security incidents in progress?

• A.Communicate potential disciplinary actions for noncompliance.
• B.Include communication policies In regular information security
• C.training Implement controls to prevent discussion with media during an Incident.
• D.Establish standard media responses for employees to control the message

Comment: *

Name: *

Email: *

Verification: *

Which of the following ensures that newly identified security weaknesses in an operating system are mitigated in a timely fashion?

• A.Patch management
• B.Change management
• C.Security baselines
• D.Acquisition management

Comment: *

Name: *

Email: *

Verification: *