Which of the following is the BEST indication of an effective information security awareness training program?

• A.An increase in the speed of incident resolution
• B.An increase in positive user feedback
• C.An increase in the identification rate during phishing simulations
• D.An increase in the frequency of phishing tests

Comment: *

Name: *

Email: *

Verification: *

The MOST appropriate time to conduct a disaster recovery test would be after:

• A.the business continuity plan (BCP) has been updated.
• B.the security risk profile has been reviewed
• C.noncompliance incidents have been filed.
• D.major business processes have been redesigned.

Comment: *

Name: *

Email: *

Verification: *

An information security manager believes that information has been classified inappropriately, = the risk of a breach. Which of the following is the information security manager's BEST action?

• A.Refer the issue to internal audit for a recommendation.
• B.Instruct the relevant system owners to reclassify the data.
• C.Complete a risk assessment and refer the results to the data owners.
• D.Re-classify the data and increase the security level to meet business risk.

Comment: *

Name: *

Email: *

Verification: *

In violation of a policy prohibiting the use of cameras at the office, employees have been issued smartphones and tablet computers with enabled web cameras. Which of the following should be the information security manager's FIRST course of action?

• A.Perform a root cause analysis.
• B.Revise the policy.
• C.Conduct a risk assessment,
• D.Communicate the acceptable use policy.

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY advantage of involving end users in continuity planning is that they:

• A.can balance the technical and business risks.
• B.can see the overall impact to the business.
• C.have a better understanding of specific business needs.
• D.are more objective than information security management.

Comment: *

Name: *

Email: *

Verification: *