For computer forensics evidence to be admissible in a court of law, the evidence MUST:

• A.meet standards of relevance
• B.have integrity and accountability
• C.be identifiable and reproducible
• D.be stored in the original media.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the FlRST step to promoting acceptable behavior with regard to information security throughout an organization?

• A.Incorporate information security standards into performance evaluations.
• B.Require signed acknowledgment of acceptable use policies.
• C.Conduct targeted acceptable use training for management and staff.
• D.Automate controls that enforce acceptable use.

Comment: *

Name: *

Email: *

Verification: *

An organization faces severe fines and penalties if not in compliance with local regulatory requirements by an established deadline. Senior management has asked the information security manager to prepare an action plan to achieve compliance.
Which of the following would provide the MOST useful information for planning purposes?

• A.Results from a business impact analysis (BIA)
• B.Deadlines and penalties for noncompliance
• C.Results from a gap analysis
• D.An inventory of security controls currently in place

Comment: *

Name: *

Email: *

Verification: *

The security baselines of an organization should be based on:

• A.standards.
• B.procedures.
• C.guidelines.
• D.policies.

Comment: *

Name: *

Email: *

Verification: *

The purpose of a corrective control is to:

• A.reduce adverse events.
• B.indicate compromise.
• C.mitigate impact.
• D.ensure compliance.

Comment: *

Name: *

Email: *

Verification: *