Of the following types of SOCs (Security Operations Centers), which one would be MOST likely used if the CISO has decided to outsource the infrastructure and administration of it?

• A.Dedicated
• B.Virtual
• C.Command
• D.Fusion

Comment: *

Name: *

Email: *

Verification: *

The BEST organization to provide a comprehensive, independent and certifiable perspective on established security controls in an environment is

• A.External Audit
• B.Forensic experts
• C.Penetration testers
• D.Internal Audit

Comment: *

Name: *

Email: *

Verification: *

Information security policies should be reviewed:

• A.by the CISO when new systems are brought online
• B.by stakeholders at least annually
• C.by the Incident Response team after an audit
• D.by internal audit semiannually

Comment: *

Name: *

Email: *

Verification: *

A Chief Information Security Officer received a list of high, medium, and low impact audit findings. Which of the following represents the BEST course of action?

• A.If the findings do not impact regulatory compliance, review current security controls.
• B.If the findings do not impact regulatory compliance, remediate only the high and medium risk findings.
• C.If the findings impact regulatory compliance, remediate the high findings as quickly as possible.
• D.If the findings impact regulatory compliance, try to apply remediation that will address the most findings for the least cost.

Comment: *

Name: *

Email: *

Verification: *

When managing the security architecture for your company you must consider:

• A.Company Values
• B.All of the above
• C.Security and IT Staff size
• D.Budget

Comment: *

Name: *

Email: *

Verification: *