QUESTION 186
When managing an Information Security Program, which of the following is of MOST importance in order to influence the culture of an organization?

QUESTION 187
An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System. Which of the following international standards can BEST assist this organization?

QUESTION 188
Scenario: Critical servers show signs of erratic behavior within your organization’s intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team. During initial investigation, the team suspects criminal activity but cannot initially prove or disprove illegal actions.
What is the MOST critical aspect of the team’s activities?

QUESTION 189
An organization has implemented a change management process for all changes to the IT production environment. This change management process follows best practices and is expected to help stabilize the availability and integrity of the organization’s IT environment. Which of the following can be used to measure the effectiveness of this newly implemented process:

QUESTION 190
During the course of a risk analysis your IT auditor identified threats and potential impacts. Next, your IT auditor should:

QUESTION 191
A CISO wants to change the defense strategy to ward off attackers. To accomplish this the CISO is looking to a strategy where attackers are lured into a zone of a safe network where attackers can be monitored, controlled, quarantined, or eradicated.

QUESTION 192
The process of creating a system which divides documents based on their security level to manage access to private data is known as ____________________.

QUESTION 193
Which of the following are the triple constraints of project management?

QUESTION 194
When deploying an Intrusion Prevention System (IPS) the BEST way to get maximum protection from the system is to deploy it

QUESTION 195
Which of the following should be determined while defining risk management strategies?

QUESTION 196
Which represents PROPER separation of duties in the corporate environment?

QUESTION 197
If the result of an NPV is positive, then the project should be selected. The net present value shows the present value of the project, based on the decisions taken for its selection. What is the net present value equal to?

QUESTION 198
Which of the following is the BEST indicator of a successful project?

QUESTION 199
Bob waits near a secured door, holding a box. He waits until an employee walks up to the secured door and uses the special card in order to access the restricted area of the target company. Just as the employee opens the door, Bob walks up to the employee (still holding the box) and asks the employee to hold the door open so that he can enter. What is the best way to undermine the social engineering activity of tailgating?

QUESTION 200
After a risk assessment is performed, a particular risk is considered to have the potential of costing the organization 1.2 Million USD. This is an example of

QUESTION 201
Which of the following is MOST beneficial in determining an appropriate balance between uncontrolled innovation and excessive caution in an organization?

QUESTION 202
Which of the following is a major benefit of applying risk levels?

QUESTION 203
Which of the following is a symmetric encryption algorithm?