In addition to business alignment and security ownership, which of the following is MOST critical for information security governance?

• A.Auditability of systems
• B.Compliance with policies
• C.Reporting of security metrics
• D.Executive sponsorship

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important reason to ensure information security is aligned with the organization's strategy?

• A.To identify the organization's risk tolerance
• B.To improve security processes
• C.To align security roles and responsibilities
• D.To optimize security risk management

Comment: *

Name: *

Email: *

Verification: *

When designing an incident response plan to be agreed upon with a cloud computing vendor, including which of the following will BEST help to ensure the effectiveness of the plan?

• A.A training program for the vendor staff
• B.An audit and compliance program
• C.Responsibility and accountability assignments
• D.Requirements for onsite recovery testing

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be MOST helpful when justifying the funding required for a compensating control?

• A.Threat assessment
• B.Risk analysis
• C.Business impact analysis
• D.Business case

Comment: *

Name: *

Email: *

Verification: *

An information security manager that is utilizing a public cloud is performing a root cause investigation of an incident that took place in that environment. Which of the following should be the security manager's MAIN concern?

• A.Limited access to information
• B.Shared infrastructure with other subscribers
• C.Transaction records split into multiple cloud locations
• D.Lack of security log filtering

Comment: *

Name: *

Email: *

Verification: *