When collecting admissible evidence, which of the following is the MOST important requirement?

• A.Need to know
• B.Preserving audit logs
• C.Due diligence
• D.Chain of custody

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST method to protect against emerging advanced persistent threat (APT) actors?

• A.Implementing a honeypot environment
• B.Updating information security awareness materials
• C.Providing ongoing training to the incident response team
• D.Implementing proactive systems monitoring

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important reason for obtaining input from risk owners when implementing controls?

• A.To reduce risk mitigation costs
• B.To resolve vulnerabilities in enterprise architecture (EA)
• C.To manage the risk to an acceptable level
• D.To eliminate threats impacting the business

Comment: *

Name: *

Email: *

Verification: *

The MOST appropriate time to conduct a disaster recovery test would be after:

• A.the security risk profile has been reviewed
• B.noncompliance incidents have been filed.
• C.the business continuity plan (BCP) has been updated.
• D.major business processes have been redesigned.

Comment: *

Name: *

Email: *

Verification: *

Which of the following activities is designed to handle a control failure that leads to a breach?

• A.Vulnerability management
• B.Root cause analysis
• C.Risk assessment
• D.Incident management

Comment: *

Name: *

Email: *

Verification: *