SQL injection is a very popular and successful injection attack method. Identify the basic SQL injection text:

• A./../../../../
• B."DROPTABLE USERNAME"
• C.NOPS
• D.' o 1=1 - -

Comment: *

Name: *

Email: *

Verification: *

Which is the BEST solution to monitor, measure, and report changes to critical data in a system?

• A.SNMP traps
• B.Syslog
• C.File integrity monitoring
• D.Application logs

Comment: *

Name: *

Email: *

Verification: *

SCENARIO: A CISO has several two-factor authentication systems under review and selects the one that is most sufficient and least costly. The implementation project planning is completed and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization's needs.
The CISO discovers the scalability issue will only impact a small number of network segments. What is the next logical step to ensure the proper application of risk management methodology within the two-facto implementation project?

• A.Create new use cases for operational use of the solution
• B.Determine if sufficient mitigating controls can be applied
• C.Decide to accept the risk on behalf of the impacted business units
• D.Report the deficiency to the audit team and create process exceptions

Comment: *

Name: *

Email: *

Verification: *

At what level of governance are individual projects monitored and managed?

• A.Milestone
• B.Enterprise
• C.Portfolio
• D.Program

Comment: *

Name: *

Email: *

Verification: *

A Chief Information Security Officer received a list of high, medium, and low impact audit findings.
Which of the following represents the BEST course of action?

• A.If the findings do not impact regulatory compliance, remediate only the high and medium risk findings.
• B.If the findings do not impact regulatory compliance, review current security controls.
• C.If the findings impact regulatory compliance, try to apply remediation that will address the most findings for the least cost.
• D.if the findings impact regulatory compliance, remediate the high findings as quickly as possible.

Comment: *

Name: *

Email: *

Verification: *