QUESTION 56
Which of the following is true regarding expenditures?

QUESTION 57
Which of the following is a weakness of an asset or group of assets that can be exploited by one or more threats?

QUESTION 58
An example of professional unethical behavior is:

QUESTION 59
A system is designed to dynamically block offending Internet IP-addresses from requesting services from a secure website. This type of control is considered

QUESTION 60
Which of the following represents the BEST method of ensuring security program alignment to business needs?

QUESTION 61
Scenario: Your company has many encrypted telecommunications links for their world-wide operations.
Physically distributing symmetric keys to all locations has proven to be administratively burdensome, but symmetric keys are preferred to other alternatives.
How can you reduce the administrative burden of distributing symmetric keys for your employer?

QUESTION 62
Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.
Which of the following frameworks and standards will BEST fit the organization as a baseline for their security program?

QUESTION 63
You have recently drafted a revised information security policy. From whom should you seek endorsement in order to have the GREATEST chance for adoption and implementation throughout the entire organization?

QUESTION 64
The single most important consideration to make when developing your security program, policies, and processes is:

QUESTION 65
Which of the following is a symmetric encryption algorithm?

QUESTION 66
You work as a project manager for TYU project. You are planning for risk mitigation. You need to quickly identify high-level risks that will need a more in-depth analysis.
Which of the following activities will help you in this?

QUESTION 67
A CISO has recently joined an organization with a poorly implemented security program. The desire is to base the security program on a risk management approach. Which of the following is a foundational requirement in order to initiate this type of program?

QUESTION 68
The patching and monitoring of systems on a consistent schedule is required by?

QUESTION 69
As the CISO you need to write the IT security strategic plan. Which of the following is the MOST important to review before you start writing the plan?

QUESTION 70
The Board of Directors of a publicly-traded company is concerned about the security implications of a strategic project that will migrate 50% of the organization’s information technology assets to the cloud. They have requested a briefing on the project plan and a progress report of the security stream of the project. As the CISO, you have been tasked with preparing the report for the Chief Executive Officer to present.
Using the Earned Value Management (EVM), what does a Cost Variance (CV) of -1,200 mean?

QUESTION 71
Which of the following activities must be completed BEFORE you can calculate risk?

QUESTION 72
Security related breaches are assessed and contained through which of the following?

QUESTION 73
An organization has defined a set of standard security controls. This organization has also defined the circumstances and conditions in which they must be applied.
What is the NEXT logical step in applying the controls in the organization?

QUESTION 74
When deploying an Intrusion Prevention System (IPS) the BEST way to get maximum protection from the system is to deploy it___________

QUESTION 75
What is the primary reason for performing a return on investment analysis?

QUESTION 76
Which of the following is a common technology for visual monitoring?