A threat intelligence report indicates there has been a significant rise in the number of attacks targeting the industry. What should the information security manager do NEXT?

• A.Conduct penetration testing to identity vulnerabilities.
• B.Update the organization's security awareness campaign.
• C.Allocate additional resources to monitor perimeter security systems,
• D.Discuss the risk with senior management.

Comment: *

Name: *

Email: *

Verification: *

Data entry functions for a web-based application have been outsourced to a third-party service provider who will work from a remote site Which of the following issues would be of GREATEST concern to an information security manager?

• A.The application does not use a secure communications protocol
• B.The application is configured with restrictive access controls
• C.The business process has only one level of error checking
• D.Server-based malware protection is not enforced

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be included in an annual information security budget that is submitted for management approval?

• A.A cost-benefit analysis of budgeted resources
• B.All of the resources that are recommended by the business
• C.Total cost of ownership (TCO)
• D.Baseline comparisons

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST facilitates recovery of data lost as a result of a cybersecurity incident?

• A.Removable storage media
• B.Disaster recovery plan (DRP)
• C.Offsite data backups
• D.Encrypted data drives

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST indication of information security strategy alignment with the business?

• A.Number of business objectives directly supported by information security initiatives
• B.Number of business executives who have attended information security awareness sessions
• C.Percentage of information security incidents resolved within defined service level agreements (SLAs)
• D.Percentage of corporate budget allocated to information security initiatives

Comment: *

Name: *

Email: *

Verification: *