In assessing risk, it is MOST essential to:

• A.provide equal coverage for all asset types.
• B.use benchmarking data from similar organizations.
• C.consider both monetary value and likelihood of loss.
• D.focus primarily on threats and recent business losses.

Comment: *

Name: *

Email: *

Verification: *

When implementing a new risk assessment methodology, which of the following is the MOST important requirement?

• A.Risk assessments must be conducted by certified staff.
• B.The methodology must be approved by the chief executive officer.
• C.Risk assessments must be reviewed annually.
• D.The methodology used must be consistent across the organization.

Comment: *

Name: *

Email: *

Verification: *

To ensure that payroll systems continue on in an event of a hurricane hitting a data center, what would be the FIRS T crucial step an information security manager would take in ensuring business continuity planning?

• A.Conducting a qualitative and quantitative risk analysis.
• B.Assigning value to the assets.
• C.Weighing the cost of implementing the plan vs. financial loss.
• D.Conducting a business impact analysis (BIA).

Comment: *

Name: *

Email: *

Verification: *

An IT service desk was not adequately prepared for a recent ransomware attack on user workstations. Which of the following should be given HIGHEST priority by the information security team when creating an action plan to improve service desk readiness?

• A.Investing in threat intelligence capability
• B.Strengthening the organization's data backup capability
• C.Updating the information security incident response manual
• D.Implementing key risk indicators (KRIs) for ransomware attacks

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST beneficial outcome of testing an incident response plan?

• A.The plan is enhanced to reflect the findings of the test
• B.Test plan results are documented.
• C.Incident response time is improved.
• D.The response includes escalation to senior management

Comment: *

Name: *

Email: *

Verification: *