An effective way of protecting applications against Structured Query Language (SQL) injection vulnerability is to:

• A.validate and sanitize client side inputs.
• B.harden the database listener component.
• C.normalize the database schema to the third normal form.
• D.ensure that the security patches are updated on operating systems.

Comment: *

Name: *

Email: *

Verification: *

A risk management program would be expected to:

• A.remove all inherent risk.
• B.maintain residual risk at an acceptable level.
• C.implement preventive controls for every threat.
• D.reduce control risk to zero.

Comment: *

Name: *

Email: *

Verification: *

The MAIN reason for internal certification of web-based business applications is to ensure:

• A.compliance with industry standards.
• B.changes to the organizational policy framework are identified.
• C.up-to-date web technology is being used.
• D.compliance with organizational policies.

Comment: *

Name: *

Email: *

Verification: *

In a large organization, defining recovery time objectives (RTOs) is PRIMARILY the responsibility of:

• A.the business unit manager.
• B.the IT manager.
• C.the information security manager.
• D.senior manager.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be the PRIMARY goal of an Information security manager when designing Information security policies?

• A.Improving the protection of information
• B.Minimizing the cost of security controls
• C.Achieving organizational objectives
• D.Reducing organizational security risk

Comment: *

Name: *

Email: *

Verification: *