A company recently developed a breakthrough technology. Since this technology could give this company a significant competitive edge, which of the following would FIRST govern how this information is to be protected?

• A.Access control policy
• B.Data classification policy
• C.Encryption standards
• D.Acceptable use policy

Comment: *

Name: *

Email: *

Verification: *

An organization is in the process of adopting a hybrid data infrastructure, transferring all non-core applications to cloud service providers and maintaining all core business functions house. The information security manager has determined a defense in depth strategy should be used. Which of the following BEST describes this strategy?

• A.Multi-factor login requirements for cloud service applications, timeouts, and complex passwords
• B.Deployments of nested firewalls within the infrastructure
• C.Separate security controls for applications, platforms, programs, and endpoints
• D.Strict enforcement of role-based access control (RBAC)

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST justification to convince management to invest in an information security program?

• A.Cost reduction
• B.Compliance with company policies
• C.Protection of business assets
• D.Increased business value

Comment: *

Name: *

Email: *

Verification: *

When application-level security controlled by business process owners is found to be poorly managed, which of the following could BEST improve current practices?

• A.Centralizing security management
• B.Implementing sanctions for noncompliance
• C.Policy enforcement by IT management
• D.Periodic compliance reviews

Comment: *

Name: *

Email: *

Verification: *

An organization's operations staff places payment files in a shared network folder and then the disbursement staff picks up the files for payment processing. This manual intervention will be automated some months later, thus cost-efficient controls are sought to protect against file alterations. Which of the following would be the BEST solution?

• A.Design a training program for the staff involved to heighten information security awareness
• B.Set role-based access permissions on the shared folder
• C.The end user develops a PC macro program to compare sender and recipient file contents
• D.Shared folder operators sign an agreement to pledge not to commit fraudulent activities

Comment: *

Name: *

Email: *

Verification: *