An organization has deployed an Identity And Access Management (IAM) tool and is expanding their information governance program. Which of the following would BEST be included in the governance for IAM?

• A.Create and enforce a strong password policy and implementing security awareness training for all users.
• B.Implementing Multi-Factor Authentication (MFA) and account lookout controls.
• C.Control physical access to the IAM system and implementing Data Loss Prevention (DPL) for credentials.
• D.Employ password masking, obfuscation, and tokenization and automate account updates based on human resources reporting.

Comment: *

Name: *

Email: *

Verification: *

An organization is updating an Application Programming Interface (API) to support requests coming from mobile applications distributed on public application stores. The API's primary function is to supply confidential documents when users request them within the mobile application. Which approach would BEST respond to this use case?

• A.Require a Virtual Private Network (VPN) connection to the organization's network to access confidential documents.
• B.Implement Open Authorization (OAuth) 2.0 to require the users to request permission to access confidential documents.
• C.Require that the user supplies their credential to access confidential documents.
• D.Implement Security Assertion Markup Language (SAML) to validate the identity of the user requesting access to confidential documents.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements best characterizes enterprise resources planning (ERP) systems?

• A.They track activity from customer order through payment.
• B.They are expensive but easy to implement.
• C.They provide real-time planning and scheduling, decision support, available-to-promise (ATP), and capable-to-promise (CTP) capabilities.
• D.They are used for strategic reporting requirements.

Comment: *

Name: *

Email: *

Verification: *

What priority control technique is most appropriate for a firm using a cellular production system?

• A.Shortest processing time (SPT) rule
• B.Distribution requirements planning (DRP)
• C.Pull production activity control (PAC)
• D.Push production activity control (PAC)

Comment: *

Name: *

Email: *

Verification: *

When conducting a thorough risk assessment that involves identifying system threats and vulnerabilities and determining the potential for adverse effects on individuals, what additional factors MUST the organization consider?

• A.Defining which systems are maintained by third parties and whether their control processes have been included as part of the risk assessment
• B.Determining the likelihood and magnitude of harm from unauthorized access, use, disclosure, disruption, modification, or destruction of the system
• C.Developing a contingency roadmap that will provide processes for each identified and documented risk element
• D.Assessing the possible impact from unauthorized access on the organization's cyber insurance policies

Comment: *

Name: *

Email: *

Verification: *