Within the confidentiality, integrity, and availability (CIA) triad, which of the following activities BEST supports the concept of confidentiality?

• A.Ensuring hashing of administrator credentials
• B.Enforcing service level agreements (SLAs)
• C.Ensuring encryption for data in transit
• D.Utilizing a formal change management process

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the PRIMARY objective of incident triage?

• A.Coordination of communications
• B.Mitigation of vulnerabilities
• C.Categorization of events
• D.Containment of threats

Comment: *

Name: *

Email: *

Verification: *

In information security governance, the PRIMARY role of the board of directors is to ensure:

• A.communication of security posture to stakeholders.
• B.approval of relevant policies and standards.
• C.alignment with the strategic goals of the organization
• D.compliance with regulations and best practices

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be MOST effective in reducing the impact of a distributed denial of service (DDoS) attack?

• A.Spread a site across multiple ISPs.
• B.Block the attack at the source.
• C.Impose state limits on servers.
• D.Harden network security.

Comment: *

Name: *

Email: *

Verification: *

An information security manager is asked to provide evidence that the organization is fulfilling its legal obligation to protect personally identifiable information (PII).
Which of the following would be

• A.Written policies and standards
• B.Privacy awareness training
• C.Metrics related to program effectiveness
• D.Risk assessments of privacy-related applications

Comment: *

Name: *

Email: *

Verification: *