Which of the following is the BEST indicator of a successful external intrusion into computer systems?

• A.Decrease in the number of login failures.
• B.Unexpected use of protocols within the DMZ.
• C.Spikes in the number of login failures.
• D.Unexpected increase of malformed URLs.

Comment: *

Name: *

Email: *

Verification: *

An organization is about to purchase a rival organization. The PRIMARY reason for performing information security due diligence prior to making the purchase is to:

• A.determine the security exposures.
• B.assess the ability to integrate the security department operations.
• C.ensure compliance with international standards.
• D.evaluate the security policy and standards.

Comment: *

Name: *

Email: *

Verification: *

When facilitating the alignment of corporate governance and information security governance, which of the following is the MOST important role of an organizations security steering committee?

• A.Obtaining support for the integration from business owners
• B.Evaluating and reporting the degree of integration
• C.Obtaining approval for the information security budget
• D.Defining metrics to demonstrate alignment

Comment: *

Name: *

Email: *

Verification: *

To justify its ongoing security budget, which of the following would be of MOST use to the information security' department?

• A.Security breach frequency
• B.Annualized loss expectancy (ALE)
• C.Cost-benefit analysis
• D.Peer group comparison

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST indicates that an organization can respond to incidents in a timely manner?

• A.The organization conducts walk-through exercises for incident response.
• B.No audit issues were identified with the incident response plan.
• C.The incident response plan has been endorsed by management.
• D.Adequate financial resources are available for the response team.

Comment: *

Name: *

Email: *

Verification: *