QUESTION 55
In business-critical applications, user access should be approved by the:

QUESTION 56
In the event that a password policy cannot be implemented for a legacy application, which of the following is the BEST course of action?

QUESTION 57
The use of a business case to obtain funding for an information security investment is MOST effective when the business case:

QUESTION 58
Which of the following is MOST effective in preventing weaknesses from being introduced into existing production systems?

QUESTION 59
Senior management has just accepted the risk of noncompliance with a new regulation. What should the information security manager do NEXT7

QUESTION 60
Which of the following provides a sound basis for effective security change management?

QUESTION 61
Which of the following would present the GREATEST risk to information security?

QUESTION 62
Regular vulnerability scanning on an organization’s internal network has identified that many user workstations have unpatched versions of software What is the BEST way for the information security manager to help senior management understand the related risk?

QUESTION 63
The BEST way 10 establish a security baseline is by documenting

QUESTION 64
Which of the following devices should be placed within a DMZ?

QUESTION 65
A post-incident review should be conducted by an incident management team to determine:

QUESTION 66
An organization has an approved bring your own device (BYOD) program. Which of the following is the MOST effective method to enforce application control on personal devices?

QUESTION 67
In the course of responding 10 an information security incident, the BEST way to treat evidence for possible legal action is defined by:

QUESTION 68
Which of the following will MOST effectively minimize the chance of inadvertent disclosure of confidential information?

QUESTION 69
Which of the following will BEST prevent an employee from using a USB drive to copy files from desktop computers?