When investigating an information security incident, details of the incident should be shared:

• A.only with management.
• B.only as needed,
• C.widely to demonstrate positive intent.
• D.only with internal audit.

Comment: *

Name: *

Email: *

Verification: *

A PRIMARY purpose of creating security policies is to:

• A.establish the way security tasks should be executed.
• B.implement management's security governance strategy.
• C.define allowable security boundaries.
• D.communicate management's security expectations.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST critical when creating an incident response plan?

• A.Decumenting incident notification and escalation processes
• B.Identifying vulnerable data assets
• C.Identifying what constitutes an incident
• D.Aligning with the risk assessment process

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST supports information security management in the event of organizational changes in security personnel?

• A.Formalizing a security strategy and program
• B.Developing an awareness program for staff
• C.Ensuring current documentation of security processes
• D.Establishing processes within the security operations team

Comment: *

Name: *

Email: *

Verification: *

When properly implemented, secure transmission protocols protect transactions:

• A.from denial of service (DoS) attacks.
• B.from eavesdropping.
• C.on the client desktop.
• D.in the server's database.

Comment: *

Name: *

Email: *

Verification: *