An information security manager that is utilizing a public cloud is performing a root cause investigation of an incident that took place in that environment. Which of the following should be the security manager's MAIN concern?

• A.Transaction records split into multiple cloud locations
• B.Shared infrastructure with other subscribers
• C.Lack of security log filtering
• D.Limited access to information

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be of MOST influence to an information security manager when developing IT security policies?

• A.Past and current threats
• B.IT security framework
• C.Compliance with regulations
• D.Business strategy

Comment: *

Name: *

Email: *

Verification: *

In assessing the degree to which an organization may be affected by new privacy legislation, information security management should FIRST:

• A.develop an operational plan for achieving compliance with the legislation.
• B.identify systems and processes that contain privacy components.
• C.restrict the collection of personal information until compliant.
• D.identify privacy legislation in other countries that may contain similar requirements.

Comment: *

Name: *

Email: *

Verification: *

Why is "slack space" of value to an information security manager as pan of an incident investigation?

• A.Hidden data may be stored there
• B.The slack space contains login information
• C.Slack space is encrypted
• D.It provides flexible space for the investigation

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST helps to enable the desired information security culture within an organization?

• A.Information security awareness training and campaigns
• B.Effective information security policies and procedures
• C.Delegation of information security roles and responsibilities
• D.Incentives for appropriate information security-related behavior

Comment: *

Name: *

Email: *

Verification: *