A global organization has developed a strategy to share a customer information database between offices in two countries. In this situation, it is

• A.data sharing complies with local laws and regulations at both locations.
• B.a nondisclosure agreement is signed.
• C.data is encrypted in transit and at rest.
• D.risk coverage is split between the two locations sharing data.

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY purpose of installing an intrusion detection system (IDS) is to identify:

• A.weaknesses in network security.
• B.patterns of suspicious access.
• C.how an attack was launched on the network.
• D.potential attacks on the internal network.

Comment: *

Name: *

Email: *

Verification: *

An information security manager is advised by contacts in law enforcement that there is evidence that his/ her company is being targeted by a skilled gang of hackers known to use a variety of techniques, including social engineering and network penetration. The FIRST step that the security manager should take is to:

• A.perform a comprehensive assessment of the organization's exposure to the hacker's techniques.
• B.initiate awareness training to counter social engineering.
• C.immediately advise senior management of the elevated risk.
• D.increase monitoring activities to provide early detection of intrusion.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important to establish when developing prioritization processes for events during an incident?

• A.Recovery point objective (RPO)
• B.Criteria for alerting senior management
• C.Security management approval
• D.Recovery time objective (RTO)

Comment: *

Name: *

Email: *

Verification: *

What is the BEST way to determine the level of risk associated with information assets processed by an IT application?

• A.Research compliance requirements associated with the information.
• B.Evaluate the potential value of information for an attacker.
• C.Calculate the business value of the information assets.
• D.Review the cost of acquiring the information assets for the business.

Comment: *

Name: *

Email: *

Verification: *