When personal information is transmitted across networks, there MUST be adequate controls over:

• A.change management.
• B.privacy protection.
• C.consent to data transfer.
• D.encryption devices.

Comment: *

Name: *

Email: *

Verification: *

The MOST appropriate role for senior management in supporting information security is the:

• A.evaluation of vendors offering security products.
• B.assessment of risks to the organization.
• C.approval of policy statements and funding.
• D.monitoring adherence to regulatory requirements.

Comment: *

Name: *

Email: *

Verification: *

Information security projects should be prioritized on the basis of:

• A.time required for implementation.
• B.impact on the organization.
• C.total cost for implementation.
• D.mix of resources required.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way for an information security manager to protect against a zero-day attack?

• A.Perform a business impact analysis (BIA).
• B.Conduct vulnerability scans on a daily basis.
• C.Configure daily runs of the virus protection software.
• D.Implement heuristic-based monitoring tools

Comment: *

Name: *

Email: *

Verification: *

Which of the following would BEST protect an organization's confidential data stored on a laptop computer from unauthorized access?

• A.Strong authentication by password
• B.Encrypted hard drives
• C.Multifactor authentication procedures
• D.Network-based data backup

Comment: *

Name: *

Email: *

Verification: *