Which of the following has the MOST direct impact on the usability of an organization's asset classification program?

• A.The frequency of updates to the organization's risk register
• B.The granularity of classifications in the hierarchy
• C.The support of senior management for the classification scheme
• D.The business objectives of the organization

Comment: *

Name: *

Email: *

Verification: *

In the course of examining a computer system for forensic evidence, data on the suspect media were inadvertently altered. Which of the following should have been the FIRST course of action in the investigative process?

• A.Perform a backup of the suspect media to new media.
• B.Perform a bit-by-bit image of the original media source onto new media.
• C.Make a copy of all files that are relevant to the investigation.
• D.Run an error-checking program on all logical drives to ensure that there are no disk errors.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the GREATEST security threat when an organization allows remote access through a virtual private network (VPN)?

• A.Attackers could compromise the VPN gateway.
• B.VPN traffic could be sniffed and captured.
• C.Client logins are subject to replay attack.
• D.Compromised VPN clients could impact the network.

Comment: *

Name: *

Email: *

Verification: *

An information security manager reviewing firewall rules will be MOST concerned if the firewall allows:

• A.source routing.
• B.broadcast propagation.
• C.unregistered ports.
• D.nonstandard protocols.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST effective mitigation strategy to protect confidential information from insider threats?

• A.Defining segregation of duties
• B.Performing an entitlement review process
• C.Implementing authentication mechanism
• D.Establishing authorization controls

Comment: *

Name: *

Email: *

Verification: *