The PRIMARY reason for creating a business case when proposing an information security project is to:

• A.establish the value of the project in relation to business objectives
• B.establish the value of the project with regard to regulatory compliance
• C.ensure relevant business parties are involved in the project
• D.ensure comprehensive security controls are identified

Comment: *

Name: *

Email: *

Verification: *

A risk management program should reduce risk to:

• A.zero.
• B.an acceptable level.
• C.an acceptable percent of revenue.
• D.an acceptable probability of occurrence.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way for an information security
manager to justify ongoing annual maintenance fees associated with an
intrusion prevention system (IPS)?

• A.Provide yearly competitive pricing to illustrate the value of the IPS.
• B.Establish and present appropriate metrics that track performance.
• C.Perform a penetration test to demonstrate the ability to protect
• D.Perform industry research annually and document the overall ranking of the IPS.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be the GREATEST consideration when determining the recovery time objective (RTO) for an in-house critical application, database, or server?

• A.Impact of service interruption
• B.Direction from senior management
• C.Results of recovery testing
• D.Determination of recovery point objective (RPO)

Comment: *

Name: *

Email: *

Verification: *

The GREATEST benefit of choosing a private cloud over a public cloud would be:

• A.server protection.
• B.online service availability.
• C.collection of data forensics.
• D.containment of customer data.

Comment: *

Name: *

Email: *

Verification: *