What tools is MOST appropriate to assess whether information security governance objectives are being met?
Response:

• A.Balanced scorecard. A BSC is most effective for evaluating the degree to which information security objectives are being met.
• B.Balanced scorecard. A BSC is most effective for disconnecting the degree to which information security objectives are being met.
• C.Balanced scorecard. A BSC is most uneffective for evaluating the degree to which information security objectives are being met.
• D.Balanced scorecard. A BSS is most uneffective for disconnecting the degree to which information security objectives are being met.

Comment: *

Name: *

Email: *

Verification: *

Neil works as a project manager for SoftTech Inc. He is working with Tom, the COO of his company, on several risks within the project. Tom understands that through qualitative analysis Neil has identified many risks in the project.
Tom's concern, however, is that the priority list of these risk events are sorted in "high- risk,"
"moderate-risk," and "low-risk" as conditions apply within the project. Tom wants to know that is there any other objective on which Neil can make the priority list for project risks. What will be Neil's reply to Tom?
Response:

• A.Risks may be listed by the additional analysis and response
• B.Risks may be listed by categories
• C.Risk may be listed by the responses in the near-term
• D.Risks may be listed by priority separately for schedule, cost, and performance

Comment: *

Name: *

Email: *

Verification: *

What may Colvine Tech do if they determine that the root cause of an unauthorized change is an adversarial attack?
Response:

• A.Adjust intrusion detection and prevention system
• B.Implement additional controls to reduce the risk of future attacks
• C.Invoke incident response
• D.All of the above

Comment: *

Name: *

Email: *

Verification: *

The tiers of the National Institute of Standards and Technology (NIST) risk management framework are Response:

• A.confidentiality, integrity, availability.
• B.prevention, detection, recovery.
• C.organization, mission/business process, information system.
• D.operational, management, system.

Comment: *

Name: *

Email: *

Verification: *

Sam is the project manager of a construction project in south Florid

• A.Mitigation
• B.This area of the United States is prone to hurricanes during certain parts of the year. As part of the project plan Sam and the project team acknowledge the possibility of hurricanes and the damage the hurricane could have on the project's deliverables, the schedule of the project, and the overall cost of the project.
  Once Sam and the project stakeholders acknowledge the risk of the hurricane they go on planning the project as if the risk is not likely to happen. What type of risk response is Sam using?
  Response:
• C.Avoidance
• D.Active acceptance
• E.Passive acceptance

Comment: *

Name: *

Email: *

Verification: *