When an organization is implementing an information security governance program, its board of directors should be responsible for:

• A.drafting information security policies.
• B.reviewing training and awareness programs.
• C.setting the strategic direction of the program.
• D.auditing for compliance.

Comment: *

Name: *

Email: *

Verification: *

Which of the following devices should be placed within a DMZ?

• A.Proxy server
• B.Application server
• C.Departmental server
• D.Data warehouse server

Comment: *

Name: *

Email: *

Verification: *

To reduce the possibility of service interruptions, an entity enters into contracts with multiple Internet service providers (ISPs). Which of the following would be the MOST important item to include?

• A.Service level agreements (SLAs)
• B.Right to audit clause
• C.Intrusion detection system (IDS) services
• D.Spam filtering services

Comment: *

Name: *

Email: *

Verification: *

What is the MAIN drawback of e-mailing password-protected zip files across the Internet? They:

• A.all use weak encryption.
• B.are decrypted by the firewall.
• C.may be quarantined by mail filters.
• D.may be corrupted by the receiving mail server.

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY objective of performing a post-incident review is to:

• A.re-evaluate the impact of incidents
• B.identify vulnerabilities
• C.identify control improvements.
• D.identify the root cause.

Comment: *

Name: *

Email: *

Verification: *