Which of the following is an advantage of a centralized information security organizational structure?

• A.It is easier to promote security awareness.
• B.It is easier to manage and control.
• C.It is more responsive to business unit needs.
• D.It provides a faster turnaround for security requests.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a potential indicator of inappropriate Internet use by staff?

• A.Increased help desk calls for password resets
• B.Reduced number of pings on firewalls
• C.Increased reports of slow system performance
• D.Increased number of weakness from vulnerability scans

Comment: *

Name: *

Email: *

Verification: *

In information security governance, the PRIMARY role of the board of directors is to ensure:

• A.alignment with the strategic goals of the organization
• B.compliance with regulations and best practices
• C.communication of security posture to stakeholder*
• D.approval of relevant policies and standards.

Comment: *

Name: *

Email: *

Verification: *

Who can BEST advocate the development of and ensure the success of an information security program?

• A.Internal auditor
• B.Chief operating officer (COO)
• C.Steering committee
• D.IT management

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important reason for performing a risk analysis?

• A.Identifying and eliminating threats
• B.Identifying critical information assets
• C.Promoting increased security awareness in the organization
• D.Assigning the appropriate level of protection

Comment: *

Name: *

Email: *

Verification: *