Which of the following is a performance measure that is used to evaluate the efficiency of an investment or to compare the efficiency of a number of different investments?

• A.Return On Security Investment
• B.Total Cost of Ownership
• C.Return On Investment
• D.Redundant Array of Inexpensive Disks

Comment: *

Name: *

Email: *

Verification: *

Which is the MOST important parameter while selecting appropriate risk response?

• A.Cost of response
• B.Capability to implement response
• C.Importance of risk
• D.Efficiency of response
• E.Explanation:
  The cost of the response, which is applied so as to reduce risk within tolerance levels, is one of the most important parameter. By considering the cost of response, it is decided whether or not benefits of applying response is greater than accepting the risk; and according to this analysis it is decided whether the certain response should be applied or not. For example, if risk transfer response is applied by using insurance, then cost would be the cost of insurance.

Comment: *

Name: *

Email: *

Verification: *

An organization has procured a managed hosting service and just discovered the location is likely to be flooded every 20 years. Of the following, who should be notified of this new information FIRST.

• A.The risk owner who also owns the business service enabled by this infrastructure
• B.The site manager who is required to provide annual risk assessments under the contract
• C.The chief information officer (CIO) who is responsible for the hosted services
• D.The data center manager who is also employed under the managed hosting services contract

Comment: *

Name: *

Email: *

Verification: *

During a routine check, a system administrator identifies unusual activity indicating an intruder within a firewall. Which of the following controls has MOST likely been compromised?

• A.Identification
• B.Data validation
• C.Authentication
• D.Data integrity

Comment: *

Name: *

Email: *

Verification: *

A risk practitioner has observed that risk owners have approved a high number of exceptions to the information security policy. Which of the following should be the risk practitioner's GREATEST concern?

• A.Aggregate risk is approaching the tolerance threshold
• B.Vulnerabilities are not being mitigated
• C.Security policies are being reviewed infrequently.
• D.Controls are not operating efficiently.

Comment: *

Name: *

Email: *

Verification: *