Which of the following risks refer to probability that an actual return on an investment will be lower than the investor's expectations?

• A.Integrity risk
• B.Project ownership risk
• C.Relevance risk
• D.Expense risk
• E.Explanation:
  Probability that an actual return on an investment will be lower than the investor's expectations is termed as investment risk or expense risk. All investments have some level ofrisk associated with it due to the unpredictability of the market's direction. This includes consideration of the overall IT investment portfolio.

Comment: *

Name: *

Email: *

Verification: *

What is the PRIMARY reason an organization should include background checks on roles with elevated access to production as part of its hiring process?

• A.Eliminate risk associated with personnel
• B.Reduce exposure to vulnerabilities
• C.Reduce internal threats
• D.Ensure new hires have the required skills

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to ensure that outsourced service providers comply with the enterprise's information security policy?

• A.Penetration testing
• B.Service level monitoring
• C.Security awareness training
• D.Periodic audits
• E.Explanation:
  As regular audits can spot gaps in information security compliance, periodic audits can ensure that
  outsourced service provider comply with the enterprise's information security policy.
• F.is incorrect. Training can increase user awareness of the information security policy,
  but is less effective than periodic auditing.
• G.is incorrect. Penetration testing can identify security vulnerability, but cannot ensure
  information compliance.

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY objective of The board of directors periodically reviewing the risk profile is to help ensure:

• A.the risk monitoring process has been established
• B.performance of controls is adequate
• C.the risk strategy is appropriate
• D.KRIs and KPIs are aligned

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST critical security consideration when an enterprise outsource its major part of IT department to a third party whose servers are in foreign company?

• A.A security breach notification may get delayed due to time difference
• B.The enterprise could not be able to monitor the compliance with its internal security and privacy guidelines
• C.Laws and regulations of the country of origin may not be enforceable in foreign country
• D.Additional network intrusion detection sensors should be installed, resulting in additional cost

Comment: *

Name: *

Email: *

Verification: *