he MOST significant limitation of vulnerability scanning is the fact that modern scanners only detect:

• A.common vulnerabilities.
• B.unknown vulnerabilities.
• C.known vulnerabilities.
• D.zero-day vulnerabilities.

Comment: *

Name: *

Email: *

Verification: *

The protection of information from unauthorized access or disclosure is known as:

• A.access control.
• B.cryptograph
• C.media protect on.
• D.confidentiality.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a MAIN benefit of using Security as a Service (SECaaS) providers?

• A.Significant investments and specialized security skills are not required.
• B.Enterprises can use the latest technologies to counter threats that are constantly evolving.
• C.SECaaS providers are compliant with specific security requirements and new regulations.
• D.Available security services from providers are affordable to enterprises of all sizes.

Comment: *

Name: *

Email: *

Verification: *

What would be an IS auditor's BEST response to an IT managers statement that the risk associated with the use of mobile devices in an organizational setting is the same as for any other device?

• A.Replication of privileged access and the greater likelihood of physical loss increases risk levels.
• B.The risk associated with mobile devices is less than that of other devices and systems.
• C.The risk associated with mobile devices cannot be mitigated with similar controls for workstations.
• D.The ability to wipe mobile devices and disable connectivity adequately mitigates additional

Comment: *

Name: *

Email: *

Verification: *

Which of the following describes specific, mandatory controls or rules to support and comply with a policy?

• A.Frameworks
• B.Guidelines
• C.Basedine
• D.Standards

Comment: *

Name: *

Email: *

Verification: *