Your IT auditor is reviewing significant events from the previous year and has identified some procedural oversights.
Which of the following would be the MOST concerning?

• A.Lack of notification to the public of disclosure of confidential information
• B.Lack of reporting of a successful denial of service attack on the network.
• C.Failure to notify police of an attempted intrusion
• D.Lack of notification to the public of disclosure of confidential information

Comment: *

Name: *

Email: *

Verification: *

A newly-hired CISO needs to understand the organization's financial management standards for business units and operations. Which of the following would be the best source of this information?

• A.The internal accounting department
• B.The external financial audit service
• C.The Chief Financial Officer (CFO)
• D.The managers of the accounts payables and accounts receivables teams

Comment: *

Name: *

Email: *

Verification: *

Security related breaches are assessed and contained through which of the following?

• A.The IT support team.
• B.Physical security team.
• C.Incident response
• D.A forensic analysis.

Comment: *

Name: *

Email: *

Verification: *

Which of the following represents the best method of ensuring business unit alignment with security program requirements?

• A.Demonstrate executive support with written mandates for security policy adherence
• B.Provide clear communication of security requirements throughout the organization
• C.Perform increased audits of security processes and procedures
• D.Create collaborative risk management approaches within the organization

Comment: *

Name: *

Email: *

Verification: *

As a CISO you need to understand the steps that are used to perform an attack against a network. Put each step into the correct order.
1. Covering tracks
2. Scanning and enumeration
3. Maintaining Access
4. Reconnaissance
5. Gaining Access

• A.4, 3, 5, 2, 1
• B.4, 5, 2, 3, 1
• C.2, 5, 3, 1, 4
• D.4, 2, 5, 3, 1

Comment: *

Name: *

Email: *

Verification: *