QUESTION 314
Which of the following BEST ensures that security risks will be reevaluated when modifications in application developments are made?

QUESTION 315
The MOST important function of a risk management program is to:

QUESTION 316
An organization is aligning its incident response capability with a public cloud service provider. What should be the information security manager’s FIRST course of action?

QUESTION 317
During the security review of organizational servers it was found that a file server containing confidential human resources (HR) data was accessible to all user IDs. As a FIRST step, the security manager should:

QUESTION 318
When implementing a new risk assessment methodology, which of the following is the MOST important requirement?

QUESTION 319
Which of the following is the MOST critical activity to ensure the ongoing security of outsourced IT services?

QUESTION 320
Following a breach where the risk has been isolated and forensic processes have been performed, which of the following should be done NEXT?

QUESTION 321
Which of the following is MOST important to include in monthly information security reports to the board?

QUESTION 322
Risk assessment is MOST effective when performed:

QUESTION 323
Which of the following is the BEST way for an organization to determine the maturity level of its information security program?

QUESTION 324
In an organization that has undergone an expansion through an acquisition which of the following would BEST secure the enterprise network?

QUESTION 325
Temporarily deactivating some monitoring processes, even if supported by an acceptance of operational risk, may not be acceptable to the information security manager if:

QUESTION 326
A message* that has been encrypted by the sender’s private key and again by the receiver’s public key achieves:

QUESTION 327
An information security manager reviewing firewall rules will be MOST concerned if the firewall allows:

QUESTION 328
Security audit reviews should PRIMARILY:

QUESTION 329
Managing the life cycle of a digital certificate is a role of a(n):

QUESTION 330
Senior management has allocated funding to each of the organization’s divisions to address information security vulnerabilities. The funding is based on each division’s technology budget from the previous fiscal year. Which of the following should be of GREATEST concern to the information security manager?

QUESTION 331
Reviewing security objectives and ensuring the integration of security across business units is PRIMARILY the focus of the:

QUESTION 332
Internal audit has reported a number of information security issues that are not in compliance with regulatory requirements. What should the information security manager do FIRST?

QUESTION 333
Nonrepudiation can BEST be ensured by using:

QUESTION 334
To implement a security framework, an information security manager must FIRST develop:

QUESTION 335
Which of the following controls would BEST prevent accidental system shutdown from the console or operations area?

QUESTION 336
Which of the following is MOST important when selecting a third-party security operations center?