The alerting, monitoring and life-cycle management of security related events is typically handled by the

• A.governance, risk, and compliance tools
• B.risk management process
• C.risk assessment process
• D.security threat and vulnerability management process

Comment: *

Name: *

Email: *

Verification: *

The mean time to patch, number of virus outbreaks prevented, and number of vulnerabilities mitigated are examples of what type of performance metrics?

• A.Risk metrics
• B.Management metrics
• C.Operational metrics
• D.Compliance metrics

Comment: *

Name: *

Email: *

Verification: *

SCENARIO: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified.
The CISO has validated audit findings, determined if compensating controls exist, and started initial remediation planning. Which of the following is the MOST logical next step?

• A.Review security procedures to determine if they need modified according to findings
• B.Create detailed remediation funding and staffing plans
• C.Validate the effectiveness of current controls
• D.Report the audit findings and remediation status to business stake holders

Comment: *

Name: *

Email: *

Verification: *

Which of the following represents the BEST reason for an organization to use the Control Objectives for Information and Related Technology (COBIT) as an Information Technology (IT) framework?

• A.It provides for a consistent and repeatable staffing model for technology organizations
• B.Information Security (IS) procedures often require augmentation with other standards
• C.It allows executives to more effectively monitor IT implementation costs
• D.Implementation of it eases an organization's auditing and compliance burden

Comment: *

Name: *

Email: *

Verification: *

What is the difference between encryption and tokenization?

• A.The token contains the all original information
• B.Tokenization combined with hashing is always better than encryption
• C.Encryption can be mathematically reversed to provide the original information
• D.Tokenization can be mathematically reversed to provide the original information

Comment: *

Name: *

Email: *

Verification: *