The PRIMARY reason for periodic penetration testing of Internet-facing applications is to:

• A.identify vulnerabilities in the system.
• B.ensure policy and regulatory compliance.
• C.verify Internet firewall control settings.
• D.assess the proliferation of new threats.

Comment: *

Name: *

Email: *

Verification: *

Which of the following are the responsibilities of Enterprise risk committee?
Each correct answer represents a complete solution. Choose three.

• A.React to risk events
• B.Analyze risk
• C.Risk aware decision
• D.Articulate risk
• E.Explanation:
  Risk aware decision, analyzing risk, and articulating risk are the responsibilities of Enterprise risk committee. They are the executives who are accountable for the enterprise level collaboration and consensus required to support enterprise risk management (ERM) activities and decisions. An IT risk council may be established to consider IT risk in more detail andadvise the enterprise risk
  committee. ERC ensure that these activities are completed successfully.

Comment: *

Name: *

Email: *

Verification: *

A maturity model is MOST useful to an organization when it:

• A.provides a reference for progress
• B.defines a qualitative measure of risk
• C.provides risk metrics.
• D.benchmarks against other organizations

Comment: *

Name: *

Email: *

Verification: *

A global organization is planning to collect customer behavior data through social media advertising. Which of the following is the MOST important business risk to be considered?

• A.Regulatory requirements may differ in each country.
• B.The data analysis may be ineffective in achieving objectives.
• C.Data sampling may be impacted by various industry restrictions.
• D.Business advertising will need to be tailored by country.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the GREATEST benefit of analyzing logs collected from different systems?

• A.A record of incidents is maintained.
• B.Developing threats are detected earlier.
• C.Security violations can be identified.
• D.Forensic investigations are facilitated.

Comment: *

Name: *

Email: *

Verification: *