The ultimate goal of an IT security projects is:

• A.Support business requirements
• B.Complete security
• C.Increase stock value
• D.Implement information security policies

Comment: *

Name: *

Email: *

Verification: *

As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building.
Below your office window you notice a door that is normally propped open during the day for groups of people to take breaks outside. Upon looking closer you see there is no badge reader.
What should you do?

• A.Post a guard at the door to maintain physical security
• B.Close and chain the door shut and send a company-wide memo banning the practice
• C.Have a risk assessment performed
• D.Nothing, this falls outside your area of influence

Comment: *

Name: *

Email: *

Verification: *

What should an organization do to ensure that they have a sound Business Continuity (BC) Plan?

• A.Conduct a Disaster Recovery (RD) exercise every year to test the plan
• B.Outsource the creation and execution of the BC plan to a third party vendor
• C.Test every three years to ensure that things work as planned
• D.Conduct periodic tabletop exercises to refine the BC plan

Comment: *

Name: *

Email: *

Verification: *

When deploying an Intrusion Prevention System (IPS) the BEST way to get maximum protection from the system is to deploy it___________

• A.In promiscuous mode and block malicious traffic.
• B.In-line and turn on blocking mode to stop malicious traffic.
• C.In promiscuous mode and only detect malicious traffic.
• D.In-lie and turn on alert mode to stop malicious traffic.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MAIN reason to follow a formal risk management process in an organization that hosts and uses privately identifiable information (PII) as part of their business models and processes?

• A.Fiduciary responsibility to safeguard credit information
• B.Need to transfer the risk associated with hosting PII data
• C.Need to better understand the risk associated with using PII data
• D.Need to comply with breach disclosure laws

Comment: *

Name: *

Email: *

Verification: *