Which of the following will BEST prevent an employee from using a USB drive to copy files from desktop computers?

• A.Restrict the available drive allocation on all PCs
• B.Disable universal serial bus (USB) ports on all desktop devices
• C.Conduct frequent awareness training with noncompliance penalties
• D.Establish strict access controls to sensitive information

Comment: *

Name: *

Email: *

Verification: *

A risk analysis should:

• A.include a benchmark of similar companies in its scope.
• B.assume an equal degree of protection for all assets.
• C.address the potential size and likelihood of loss.
• D.give more weight to the likelihood vs. the size of the loss.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be of MOST concern to an information security manager reviewing an organization's data classification program?

• A.The program allows exceptions to be granted.
• B.Labeling is not consistent throughout the organization.
• C.Data retention requirement are not defined.
• D.The classifications do not follow industry best practices.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to evaluate the impact of threat events on an organization's IT operations?

• A.Risk assessment
• B.Controls review
• C.Penetration testing
• D.Scenario analysis

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST relevant for an information security manager to communicate to IT operations?

• A.The level of inherent risk
• B.Vulnerability assessments
• C.Threat assessments
• D.The level of exposure

Comment: *

Name: *

Email: *

Verification: *