Which of the following would BEST help to ensure compliance with an organization's information security requirements by an IT service provider?

• A.Requiring an external security audit of the IT service provider
• B.Defining information security requirements with internal IT
• C.Requiring regular reporting from the IT service provider
• D.Defining the business recovery plan with the IT service provider

Comment: *

Name: *

Email: *

Verification: *

Managing the life cycle of a digital certificate is a role of a(n):

• A.system administrator.
• B.security administrator.
• C.system developer.
• D.independent trusted source.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST likely to affect an organization's ability to respond to security incidents in a timely manner?

• A.Lack of senior management buy-in
• B.Complexity of network segmentation
• C.Misconfiguration of security information and event management (SIEM) tool
• D.Inadequate detective control performance

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way for an information security manager to protect against a zero-day attack?

• A.Conduct vulnerability scans on a daily basis.
• B.Perform a business impact analysis (BIA).
• C.Configure daily runs of the virus protection software.
• D.Implement heuristic-based monitoring tools

Comment: *

Name: *

Email: *

Verification: *

The advantage of sending messages using steganographic techniques, as opposed to utilizing encryption, is that:

• A.the existence of messages is unknown.
• B.required key sizes are smaller.
• C.traffic cannot be sniffed.
• D.reliability of the data is higher in transit.

Comment: *

Name: *

Email: *

Verification: *