The ULTIMATE responsibility for ensuring the objectives of an information security framework are being met belongs to:

• A.the internal audit manager.
• B.the information security officer.
• C.the steering committee.
• D.the board of directors.

Comment: *

Name: *

Email: *

Verification: *

Which of the following defines the triggers within a business continuity plan (BCP)?

• A.Disaster recovery plan
• B.Needs of the organization
• C.Gap analysis
• D.Information security policy

Comment: *

Name: *

Email: *

Verification: *

Which of the following practices completely prevents a man-in-the-middle (MitM) attack between two hosts?

• A.Use security tokens for authentication
• B.Connect through an IPSec VPN
• C.Use https with a server-side certificate
• D.Enforce static media access control (MAC) addresses

Comment: *

Name: *

Email: *

Verification: *

A security incident has been reported within an organization. When should an information security manager contact the information owner?

• A.After the incident has been contained
• B.After the incident has been mitigated
• C.After the incident has been confirmed
• D.After the potential incident has been logged

Comment: *

Name: *

Email: *

Verification: *

Recovery point objectives (RPOs) can be used to determine which of the following?

• A.Maximum tolerable period of data loss
• B.Maximum tolerable downtime
• C.Baseline for operational resiliency
• D.Time to restore backups

Comment: *

Name: *

Email: *

Verification: *