Which of the following is the MOST effective way to help staff members understand their responsibilities for information security?

• A.Include information security responsibilities in job descriptions.
• B.Communicate disciplinary processes for policy violations.
• C.Require staff to sign confidentiality agreements.
• D.Require staff to participate in information security awareness training.

Comment: *

Name: *

Email: *

Verification: *

An organization needs to comply with new security incident response requirements. Which of the following should the information security manager do FIRST?

• A.Revise the existing incident response plan.
• B.Assess the impact to the budget,
• C.Conduct a gap analysis.
• D.Create a business case for a new incident response plan.

Comment: *

Name: *

Email: *

Verification: *

A common drawback of email software packages that provide native encryption of messages is that the encryption:

• A.cannot encrypt attachments
• B.cannot interoperate across product domains.
• C.has an insufficient key length.
• D.has no key-recovery mechanism.

Comment: *

Name: *

Email: *

Verification: *

Information security controls should be designed PRIMARILY based on:

• A.a vulnerability assessment.
• B.regulatory requirements.
• C.business risk scenarios,
• D.a business impact analysis (BIA).

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST helpful for protecting an enterprise from advanced persistent threats (APTs)?

• A.Regular antivirus updates
• B.Threat intelligence
• C.Updated security policies
• D.Defined security standards

Comment: *

Name: *

Email: *

Verification: *