An organization is considering the purchase of a competitor. To determine the competitor's security posture, the BEST course of action for the organization's information security manager would be to:

• A.assess the security policy of the competitor.
• B.assess the key technical controls of the competitor.
• C.conduct a penetration test of the competitor.
• D.perform a security gap analysis on the competitor.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST appropriate to add to a dashboard for the purpose of illustrating an organization's risk level to senior management?

• A.Budget variance for information security
• B.Results of risk and control testing
• C.Risk heat map
• D.Number of reported incidents

Comment: *

Name: *

Email: *

Verification: *

A small organization has a contract with a multinational cloud computing vendor. Which of the following would present the GREATEST concern to an information security manager if omitted from the contract?

• A.Authority of the subscriber to approve access to its data
• B.Right of the subscriber to conduct onsite audits of the vendor
• C.Escrow of software code with conditions for code release
• D.Commingling of subscribers' data on the same physical server

Comment: *

Name: *

Email: *

Verification: *

Which of the following actions should lake place immediately after a security breach is reported to an information security manager?

• A.Confirm the incident
• B.Determine impact
• C.Notify affected stakeholders
• D.Isolate the incident

Comment: *

Name: *

Email: *

Verification: *

Senior management has expressed concern that the organization's intrusion prevention system (IPS) may repeatedly disrupt business operations. Which of the following BEST indicates that the information security manager has tuned the system to address this concern?

• A.Increasing false negatives
• B.Decreasing false negatives
• C.Increasing false positives
• D.Decreasing false positives

Comment: *

Name: *

Email: *

Verification: *