Which of the following defines the triggers within a business continuity plan (BCP)? @

• A.Gap analysis
• B.Needs of the organization
• C.Information security policy
• D.Disaster recovery plan (DRP)

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be considered FIRST when recovering a compromised system that needs a complete rebuild?

• A.Patch management files
• B.Network system logs
• C.Configuration management files
• D.Intrusion detection system (IDS) logs

Comment: *

Name: *

Email: *

Verification: *

Prior to conducting a forensic examination, an information security manager should:

• A.boot the original hard disk on a clean system.
• B.create an image of the original data on new media.
• C.duplicate data from the backup media.
• D.shut down and relocate the server.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the PRIMARY objective of incident triage?

• A.Coordination of communications
• B.Mitigation of vulnerabilities
• C.Categorization of events
• D.Containment of threats

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST approach for governing noncompliance with security requirements?

• A.Require users to acknowledge the acceptable use policy.
• B.Require the steering committee to review exception requests.
• C.Base mandatory review and exception approvals on inherent risk.
• D.Base mandatory review and exception approvals on residual risk,

Comment: *

Name: *

Email: *

Verification: *