Which of the following best describes the key elements of a successful information security program?

• A.Business impact analysis, asset and change management, and security communication plan
• B.Security policy implementation, assignment of roles and responsibilities, and information asset classification
• C.Disaster recovery and business continuity planning, and the definition of access control requirements and human resource policies
• D.Senior management organizational structure, message distribution standards, and procedures for the operation of security management systems

Comment: *

Name: *

Email: *

Verification: *

Security analysts review logs on multiple servers on a daily basis. Which of the following implementations will give the best central visibility into the events occurring throughout the corporate environment without logging in to the servers individually?

• A.Deploy a database to aggregate the logging
• B.Configure the servers to forward logs to a SIEM
• C.Share the log directory on each server to allow local access.
• D.Automate the emailing of logs to the analysts.

Comment: *

Name: *

Email: *

Verification: *

A software developer has been deploying web applications with common security risks to include insufficient logging capabilities. Which of the following actions would be most effective to reduce risks associated with the application development?

• A.Perform static analyses using an integrated development environment.
• B.Deploy compensating controls into the environment.
• C.Implement server-side logging and automatic updates.
• D.Conduct regular code reviews using OWASP best practices.

Comment: *

Name: *

Email: *

Verification: *

A cybersecurity analyst is reviewing SIEM logs and observes consistent requests originating from an internal host to a blocklisted external server. Which of the following best describes the activity that is taking place?

• A.Data exfiltration
• B.Rogue device
• C.Scanning
• D.Beaconing

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a useful tool for mapping, tracking, and mitigating identified threats and vulnerabilities with the likelihood and impact of occurrence?

• A.Risk register
• B.Vulnerability assessment
• C.Penetration test
• D.Compliance report

Comment: *

Name: *

Email: *

Verification: *