An organization is the victim of a targeted attack, and is unaware of the compromise until a security analyst notices an additional user account on the firewall. The implementation of which of the following would have detected the incident?

• A.Network access control (NAC)
• B.Web-application firewall (WAF)
• C.Security information event management (SIEM)
• D.Data leakage prevention (OLP)

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST appropriate to communicate to senior management regarding information risk?

• A.Vulnerability scanning progress
• B.Emerging security technologies
• C.Defined risk appetite
• D.Risk profile changes

Comment: *

Name: *

Email: *

Verification: *

How would an information security manager balance the potentially conflicting requirements of an international organization's security standards and local regulation?

• A.Give organization standards preference over local regulations
• B.Follow local regulations only
• C.Make the organization aware of those standards where local regulations causes conflicts
• D.Negotiate a local version of the organization standards

Comment: *

Name: *

Email: *

Verification: *

An information security manager is reporting on open items from the risk register to senior management.
Which of the following is MOST important to communicate with regard to these risks?

• A.Responsible entities
• B.Key risk indicators (KRIS)
• C.Compensating controls
• D.Potential business impact

Comment: *

Name: *

Email: *

Verification: *

A multinational organization is required to follow governmental regulations with different security requirements at each of its operating locations. The chief information security officer (CISO) should be MOST concerned with:

• A.developing a security program that meets global and regional requirements.
• B.ensuring effective communication with local regulatory bodies.
• C.using industry best practice to meet local legal regulatory requirements.
• D.monitoring compliance with defined security policies and standards.

Comment: *

Name: *

Email: *

Verification: *