A computer incident response team (CIRT) manual should PRIMARILY contain which of the following documents?

• A.Risk assessment results
• B.Severity criteria
• C.Emergency call tree directory
• D.Table of critical backup files

Comment: *

Name: *

Email: *

Verification: *

When choosing the best controls to mitigate risk to acceptable levels, the information security manager's decision should be MAINLY driven by:

• A.best practices.
• B.cost-benefit analysis,
• C.control framework
• D.regulatory requirements.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST describes a buffer overflow?

• A.Malicious code designed to interfere with normal operations.
• B.A program contains a hidden and unintended function that presents a security risk.
• C.A function is carried out with more data than the function can handle.
• D.A type of covert channel that captures data.

Comment: *

Name: *

Email: *

Verification: *

Which item would be the BEST to include in the information security awareness training program for new general staff employees?

• A.Review of roles that have privileged access
• B.Discussion of how to construct strong passwords
• C.Review of various security models
• D.Discussion of vulnerability assessment results

Comment: *

Name: *

Email: *

Verification: *

The MOST important factor in planning for the long-term retention of electronically stored business records is to take into account potential changes in:

• A.storage capacity and shelf life.
• B.regulatory and legal requirements.
• C.business strategy and direction.
• D.application systems and media.

Comment: *

Name: *

Email: *

Verification: *