Which of the following is MOST likely to be discretionary?

• A.Policies
• B.Procedures
• C.Guidelines
• D.Standards

Comment: *

Name: *

Email: *

Verification: *

An information security manager has been asked to create a strategy to protect the organization's information from a variety of threat vectors. Which of the following should be done FIRST?

• A.Perform a threat modeling exercise
• B.Develop a risk profile
• C.Design risk management processes
• D.Select a governance framework

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the PRIMARY goal of a risk management program?

• A.Implement preventive controls against threats.
• B.Manage the business impact of inherent risks.
• C.Manage compliance with organizational policies.
• D.Reduce the organization's risk appetite.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the PRIMARY reason for performing an analysis of the threat landscape on a regular basis?

• A.To determine the basis for proposing an increase in security budgets
• B.To determine if existing business continuity plans are adequate
• C.To determine critical information for executive management
• D.To determine if existing vulnerabilities present a risk

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to prevent employees from making unauthorized comments to the media about security incidents in progress?

• A.Include communication policies In regular information security training
• B.training Implement controls to prevent discussion with media during an Incident.
• C.Establish standard media responses for employees to control the message
• D.Communicate potential disciplinary actions for noncompliance.

Comment: *

Name: *

Email: *

Verification: *