How would an organization know if its new information security program is accomplishing its goals?

• A.Key metrics indicate a reduction in incident impacts.
• B.Senior management has approved the program and is supportive of it.
• C.Employees are receptive to changes that were implemented.
• D.There is an immediate reduction in reported incidents.

Comment: *

Name: *

Email: *

Verification: *

When making an outsourcing decision, which of the following functions is MOST important to retain within the organization?

• A.Security management
• B.Incident response
• C.Risk assessment
• D.Security governance

Comment: *

Name: *

Email: *

Verification: *

Which of the following are likely to be updated MOST frequently?

• A.Procedures for hardening database servers
• B.Standards for password length and complexity
• C.Policies addressing information security governance
• D.Standards for document retention and destruction

Comment: *

Name: *

Email: *

Verification: *

Recovery point objectives (RPOs) can be used to determine which of the following?

• A.Maximum tolerable period of data loss
• B.Maximum tolerable downtime
• C.Baseline for operational resiliency
• D.Time to restore backups

Comment: *

Name: *

Email: *

Verification: *

When a departmental system continues to be out of compliance with an information security policy's password strength requirements, the BEST action to undertake is to:

• A.submit the issue to the steering committee.
• B.conduct an impact analysis to quantify the risks.
• C.isolate the system from the rest of the network.
• D.request a risk acceptance from senior management.

Comment: *

Name: *

Email: *

Verification: *