To which level the risk should be reduced to accomplish the objective of risk management?

• A.To a level where ALE is lower than SLE
• B.To a level where ARO equals SLE
• C.To a level that an organization can accept
• D.To a level that an organization can mitigate

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST indicates effective information security incident management?

• A.Monthly trend of information security-related incidents
• B.Average time to identify critical information security incidents
• C.Percentage of high risk security incidents
• D.Frequency of information security incident response plan testing

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the PRIMARY risk management responsibility of the second line of defense?

• A.Applying risk treatments
• B.Providing assurance of control effectiveness
• C.Implementing internal controls
• D.Monitoring risk responses

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST ensures that a firewall is configured in compliance with an enterprise's security policy?

• A.Interview the firewall administrator.
• B.Review the actual procedures.
• C.Review the device's log file for recent attacks.
• D.Review the parameter settings.

Comment: *

Name: *

Email: *

Verification: *

Which of the following process ensures that the risk response strategy remains active and that proposed controls are implemented according to schedule?

• A.Risk management
• B.Risk response integration
• C.Risk response implementation
• D.Risk response tracking

Comment: *

Name: *

Email: *

Verification: *