Which of the following provides the BEST assurance that security policies are applied across business operations?

• A.Organizational standards are required to be formally accepted.
• B.Organizational standards are enforced by technical controls.
• C.Organizational standards are documented in operational procedures.
• D.Organizational standards are included in awareness training.

Comment: *

Name: *

Email: *

Verification: *

An organization's disaster recovery plan (DRP) is documented and kept at a disaster recovery site. Which of the following is the BEST way to ensure the plan can be carried out in an emergency?

• A.Maintain an outsourced contact center in another country.
• B.Provide annual disaster recovery training to appropriate staff.
• C.Store disaster recovery documentation in a public cloud.
• D.Require disaster recovery documentation be stored with all key decision makers.

Comment: *

Name: *

Email: *

Verification: *

Which of the following messages would be MOST effective in obtaining senior management's commitment to information security management?

• A.Adopt a recognized framework with metrics.
• B.Security supports and protects the business.
• C.Effective security eliminates risk to the business.
• D.Security is a business product and not a process.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the GREATEST value provided by a security information and event management (SIEM) system?

• A.Maintaining a repository base of security policies
• B.Measuring impact of exploits on business processes
• C.Facilitating the monitoring of risk occurrences
• D.Redirecting event logs to an alternate location for business continuity plan

Comment: *

Name: *

Email: *

Verification: *

An organization is planning to outsource the execution of its disaster recovery activities. Which of the following would be MOST important to include in the outsourcing agreement?

• A.The disaster recovery communication plan
• B.Requirements for regularly testing backups
• C.Definition of when a disaster should be declared
• D.Recovery time objectives (RTOs)

Comment: *

Name: *

Email: *

Verification: *