NEW QUESTION 205
An organization has implemented a change management process for all changes to the IT production environment. This change management process follows best practices and is expected to help stabilize the availability and integrity of the organization’s IT environment. Which of the following can be used to measure the effectiveness of this newly implemented process:

NEW QUESTION 206
Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.
Which of the following is the reason the CISO has not been able to advance the security agenda in this organization?

NEW QUESTION 207
Which of the following international standards can be BEST used to define a Risk Management process in an organization?

NEW QUESTION 208
Scenario: The new CISO was informed of all the Information Security projects that the section has in progress. Two projects are over a year behind schedule and way over budget.
Which of the following will be most helpful for getting an Information Security project that is behind schedule back on schedule?

NEW QUESTION 209
When is an application security development project complete?

NEW QUESTION 210
An access point (AP) is discovered using Wireless Equivalent Protocol (WEP). The ciphertext sent by the AP is encrypted with the same key and cipher used by its stations. What authentication method is being used?

NEW QUESTION 211
A method to transfer risk is to______________.

NEW QUESTION 212
Which of the following is the MOST effective method for discovering common technical vulnerabilities within the IT environment?

NEW QUESTION 213
What is the primary reason for performing vendor management?

NEW QUESTION 214
An organization licenses and uses personal information for business operations, and a server containing that information has been compromised. What kind of law would require notifying the owner or licensee of this incident?

NEW QUESTION 215
Which of the following is the MOST important for a CISO to understand when identifying threats?

NEW QUESTION 216
A CISO implements smart cards for credential management, and as a result has reduced costs associated with help desk operations supporting password resets.
This demonstrates which of the following principles?

NEW QUESTION 217
Which regulation or policy governs protection of personally identifiable user data gathered during a cyber investigation?

NEW QUESTION 218
A recent audit has identified a few control exceptions and is recommending the implementation of technology and processes to address the finding.
Which of the following is the MOST likely reason for the organization to reject the implementation of the recommended technology and processes?

NEW QUESTION 219
Which of the following is the MAIN security concern for public cloud computing?

NEW QUESTION 220
The company decides to release the application without remediating the high-risk vulnerabilities. Which of the following is the MOST likely reason for the company to release the application?

NEW QUESTION 221
A missing/ineffective security control is identified.
Which of the following should be the NEXT step?

NEW QUESTION 222
Scenario: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified.
After determining the audit findings are accurate, which of the following is the MOST logical next activity?

NEW QUESTION 223
Which of the following strategies provides the BEST response to a ransomware attack?

NEW QUESTION 224
Who is responsible for securing networks during a security incident?