The PRIMARY purpose of a security information and event management (SIEM) system is to:

• A.track ongoing incidents
• B.provide status of incidents
• C.identify potential incidents.
• D.resolve incidents

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST indicates senior management support for an information security program?

• A.Key performance indicators (KPIs) are defined for the information security program.
• B.The information security manager meets regularly with the lines of business.
• C.Detailed information security policies are established and regularly reviewed.
• D.Risk assessments are conducted frequently by the information security team.

Comment: *

Name: *

Email: *

Verification: *

To help users apply appropriate controls related to data privacy regulation, what is MOST important to communicate to the users?

• A.Features of data protection products
• B.Data classification policy
• C.Results of penetration testing
• D.Data storage procedures

Comment: *

Name: *

Email: *

Verification: *

When a new key business application goes into production, the PRIMARY reason to update relevant business impact analysis (BIA) and business continuity/disaster recovery plans is because:

• A.this is a requirement of the security policy.
• B.software licenses may expire in the future without warning.
• C.the asset inventory must be maintained.
• D.service level agreements may not otherwise be met.

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides the BKST confirmation that the business continuity/disaster recovery plan objectives have been achieved?

• A.The recovery time objective (RTO) was not exceeded during testing
• B.Objective testing of the business continuity/disaster recovery plan has been carried out consistently
• C.The recovery point objective (RPO) was proved inadequate by disaster recovery plan testing
• D.Information assets have been valued and assigned to owners per the business continuity plan, disaster recovery plan

Comment: *

Name: *

Email: *

Verification: *