A recommended method to document the respective roles of groups and individuals for a given process is to:

• A.Develop a Responsible, Accountable, Consulted, Informed (RACI) chart
• B.Develop an isolinear response matrix with cost benefit analysis projections
• C.Develop a detailed internal organization chart
• D.Develop a telephone call tree for emergency response

Comment: *

Name: *

Email: *

Verification: *

A key cybersecurity feature of a Personal Identification Verification (PIV) Card is:

• A.Inability to export the private certificate/key
• B.It can double as physical identification at the DMV
• C.It can be used as a secure flash drive
• D.It has the user's photograph to help ID them

Comment: *

Name: *

Email: *

Verification: *

What oversight should the information security team have in the change management process for application security?

• A.Information security should be aware of any significant application security changes and work with developer to test for vulnerabilities before changes are deployed in production
• B.Information security should be aware of all application changes and work with developers before changes are deployed in production
• C.Information security should be informed of changes to applications only
• D.Development team should tell the information security team about any application security flaws

Comment: *

Name: *

Email: *

Verification: *

The Information Security Management program MUST protect:

• A.intellectual property released into the public domain
• B.all organizational assets
• C.against distributed denial of service attacks
• D.critical business processes and /or revenue streams

Comment: *

Name: *

Email: *

Verification: *

A global health insurance company is concerned about protecting confidential information. Which of the following is of MOST concern to this organization?

• A.Alignment with financial reporting regulations for each country where they operate.
• B.Alignment with International Organization for Standardization (ISO) standards.
• C.Compliance with patient data protection regulations for each country where they operate.
• D.Compliance to the Payment Card Industry (PCI) regulations.

Comment: *

Name: *

Email: *

Verification: *