A healthcare provider is developing a disaster recovery plan and wants to determine the longest duration that its systems or applications can be down before causing significant damage to the business.
What is the term used to describe this metric?

• A.Business Continuity Planning (BCP)
• B.Recovery Time Objective (RTO)
• C.Business Impact Analysis (BIA)
• D.Disaster Recovery (DR)

Comment: *

Name: *

Email: *

Verification: *

A financial institution conducted a cybersecurity assessment, which identified several vulnerabilities including outdated software and weak password policies. The company also needs to implement a new core banking system that can handle a large number of transactions while ensuring the security of customer data.
Which risk mitigation process is the most effective approach to address these vulnerabilities, and what is the best topology for the new core banking system?

• A.Implementing security patches and updates on a regular basis and using hybrid cloud topology
• B.Installing antivirus software on all endpoints and using on-premises topology
• C.Creating strong password policies and enforcing multifactor authentication and using public cloud topology
• D.Conducting regular security audits and penetration testing and using private cloud topology

Comment: *

Name: *

Email: *

Verification: *

A security team has been informed that user data on the network has been compromised.
What is the first step the organization should take to respond to this data breach?

• A.Notify affected users of the incident
• B.Implement an access control policy
• C.Increase encryption levels
• D.Publicly announce the breach

Comment: *

Name: *

Email: *

Verification: *

A large technology company has discovered a known vulnerability in its network infrastructure. The infrastructure contains a number of retired assets that are no longer receiving security updates, which can potentially be exploited by attackers to compromise the network. The company has decided to implement hardening techniques and endpoint security controls to mitigate the risk.
Which hardening technique will meet the needs of this company?

• A.Enforcing strict access control policies for all network devices
• B.Conducting regular vulnerability scans to identify potential weaknesses
• C.Implementing intrusion detection and prevention systems (IDPS)
• D.Removing all end-of-life devices from the network

Comment: *

Name: *

Email: *

Verification: *

An organization's board of directors is reviewing the risk register and attempting to evaluate whether there is too much risk for the organization.
Which metric should the board review?

• A.Risk appetite
• B.Risk evaluation plan
• C.Risk treatment plan
• D.Risk tolerance

Comment: *

Name: *

Email: *

Verification: *