Data classification is PRIMARILY the responsibility of:

• A.the data custodian.
• B.the data owner.
• C.the security manager.
• D.senior management.

Comment: *

Name: *

Email: *

Verification: *

A computer incident response team (CIRT) manual should PRIMARILY contain which of the following documents?

• A.Risk assessment results
• B.Severity criteria
• C.Emergency call tree directory
• D.Table of critical backup files

Comment: *

Name: *

Email: *

Verification: *

Who can BEST approve plans to implement an information security governance framework?

• A.Internal auditor
• B.Information security management
• C.Steering committee
• D.Infrastructure management

Comment: *

Name: *

Email: *

Verification: *

Security awareness training is MOST likely to lead to which of the following?

• A.Decrease in intrusion incidents
• B.Increase in reported incidents
• C.Decrease in security policy changes
• D.Increase in access rule violations

Comment: *

Name: *

Email: *

Verification: *

Which of the following factors is MOST likely to increase the chances of a successful social engineering attack?

• A.Technical skills
• B.Weak authentication for remote access
• C.Knowledge of internal procedures
• D.Potential financial gain

Comment: *

Name: *

Email: *

Verification: *