Which of the following is the BEST way to prevent segregation of duties violations?

• A.Enable data encryption with strong keys.
• B.Review access logs for violations.
• C.Implement role-based access.
• D.Implement an identity management system.

Comment: *

Name: *

Email: *

Verification: *

During a post-incident review, the sequence and correlation of actions must be analyzed PRIMARILY based on:

• A.interviews with personnel.
• B.logs from systems involved.
• C.documents created during the incident.
• D.A consolidated event timeline.

Comment: *

Name: *

Email: *

Verification: *

Adding security requirements late in the software development life cycle (SDLC) would MOST likely result in:

• A.operational efficiency.
• B.clearer understanding of requirements.
• C.cost savings.
• D.compensating controls.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to demonstrate to senior management that organizational security practices comply with industry standards?

• A.Existence of an industry-accepted framework
• B.Results of an independent assessment
• C.A report on the maturity of controls
• D.Up-to-date policy and procedures documentation

Comment: *

Name: *

Email: *

Verification: *

Which of the following controls would BEST help to detect a targeted attack exploiting a zero-day vulnerability?

• A.Antivirus protection
• B.Sandbox emulation
• C.Intrusion prevention system (IPS)
• D.Vulnerability scanning

Comment: *

Name: *

Email: *

Verification: *