Acme Inc. has engaged a third party vendor to provide 99.999% up-time for their online web presence and had them contractually agree to this service level agreement. What type of risk tolerance is Acme exhibiting?
(choose the BEST answer):

• A.moderate risk-tolerance
• B.medium-high risk-tolerance
• C.low risk-tolerance
• D.high risk-tolerance

Comment: *

Name: *

Email: *

Verification: *

You manage a newly created Security Operations Center (SOC), your team is being inundated with security alerts and don't know what to do. What is the BEST approach to handle this situation?

• A.Tell the team to only respond to the critical and high alerts
• B.Tell the team to do their best and respond to each alert
• C.Request additional resources to handle the workload
• D.Tune the sensors to help reduce false positives so the team can react better

Comment: *

Name: *

Email: *

Verification: *

An application vulnerability assessment has identified a security flaw in an application. This is a flaw that was previously identified and remediated on a prior release of the application. Which of the following is MOST likely the reason for this recurring issue?

• A.High turnover in the application development department
• B.Ineffective configuration management controls
• C.Lack of change management controls
• D.Lack of version/source controls

Comment: *

Name: *

Email: *

Verification: *

What is the relationship between information protection and regulatory compliance?

• A.The information required to be protected by regulatory mandate does not have to be identified in the organizations data classification policy.
• B.That all information in an organization must be protected equally.
• C.That the protection of some information such as National ID information is mandated by regulation and other information such as trade secrets are protected based on business need.
• D.There is no relationship between the two.

Comment: *

Name: *

Email: *

Verification: *

Which of the following can the company implement in order to avoid this type of security issue in the future?

• A.A audit management process
• B.A risk management process
• C.A security training program for developers
• D.Network based intrusion detection systems

Comment: *

Name: *

Email: *

Verification: *