A Chief Information Security Officer received a list of high, medium, and low impact audit findings. Which of the following represents the BEST course of action?

• A.If the findings impact regulatory compliance, remediate the high findings as quickly as possible.
• B.If the findings do not impact regulatory compliance, remediate only the high and medium risk findings.
• C.If the findings do not impact regulatory compliance, review current security controls.
• D.If the findings impact regulatory compliance, try to apply remediation that will address the most findings for the least cost.

Comment: *

Name: *

Email: *

Verification: *

When deploying an Intrusion Prevention System (IPS) the BEST way to get maximum protection from the system is to deploy it___________

• A.In-lie and turn on alert mode to stop malicious traffic.
• B.In promiscuous mode and block malicious traffic.
• C.In promiscuous mode and only detect malicious traffic.
• D.In-line and turn on blocking mode to stop malicious traffic.

Comment: *

Name: *

Email: *

Verification: *

When deploying an Intrusion Prevention System (IPS) the BEST way to get maximum protection from the system is to deploy it

• A.In-line and turn on blocking mode to stop malicious traffic.
• B.In promiscuous mode and only detect malicious traffic.
• C.In promiscuous mode and block malicious traffic.
• D.In-line and turn on alert mode to stop malicious traffic.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a strong post designed to stop a car?

• A.Bollard
• B.Gate
• C.Fence
• D.Reinforced rebar

Comment: *

Name: *

Email: *

Verification: *

What role should the CISO play in properly scoping a PCI environment?

• A.Complete the self-assessment questionnaire and work with an Approved Scanning Vendor (ASV) to determine scope
• B.Validate the business units' suggestions as to what should be included in the scoping process
• C.Ensure internal scope validation is completed and that an assessment has been done to discover all credit card data
• D.Work with a Qualified Security Assessor (QSA) to determine the scope of the PCI environment

Comment: *

Name: *

Email: *

Verification: *