With regard to resilience, which of the following is the GREATEST risk to an organization that has implemented a new critical system?

• A.The process owner has not signed off on user acceptance testing (UAT)
• B.A business impact analysis (BIA) has not been performed
• C.Business data is not sanitized in the development environment
• D.There is no plan for monitoring system downtime

Comment: *

Name: *

Email: *

Verification: *

Under the concept of ""defense in depth"", subsystems should be designed to:

• A.""fail insecure"""
• B.""fail secure"""
• C.""react to attack"""
• D.""react to failure"""
• E.None of the choices.

Comment: *

Name: *

Email: *

Verification: *

The BEST way to evaluate a shared control environment is to obtain an assurance report and review which of the following?

• A.Control self-assessment (CSA)
• B.Service level agreement (SLA)
• C.Master service agreement
• D.Complementary user entity controls

Comment: *

Name: *

Email: *

Verification: *

Failure in which of the following testing stages would have the GREATEST impact on the implementation of new application software?

• A.System testing
• B.Acceptance testing
• C.Integration testing
• D.Unit testing

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY purpose of a security information and event management (SIEM) system is to:

• A.identify potential incidents
• B.provide status of incidents
• C.resolve incidents
• D.track ongoing incidents

Comment: *

Name: *

Email: *

Verification: *