An organization implemented a number of technical and administrative controls to mitigate risk associated with ransomware. Which of the following is MOST important to present to senior management when reporting on the performance of this initiative?
Which of the following is the PRIMARY purpose of implementing information security standards?
An information security manager finds a legacy application has no defined data owner. Of the following, who would be MOST helpful in identifying the appropriate data owner?
An information security manager is MOST likely to obtain approval for a new security project when the business case provides evidence of:
Which of the following roles is BEST able to influence the security culture within an organization?
Which of the following is the PRIMARY reason to conduct a post-incident review?
When performing a business impact analysis (BIA), who should calculate the recovery time and cost estimates?
Following an unsuccessful denial of service (DoS) attack, identified weaknesses should be:
Which of the following is the MOST important reason to conduct interviews as part of the business impact analysis (BIA) process?
Management of a financial institution accepted an operational risk that consequently led to the temporary deactivation to a critical monitoring process. Which of the following should be the information security manager's GREATEST concern with this situation?
Of the following, whose input is of GREATEST importance in the development of an information security strategy?
Which of the following is MOST important to ensure incident management readiness?
An information security manager has become aware that a third-party provider is not in compliance with the statement of work (SOW). Which of the following is the BEST course of action?
What is the BEST way to inform senior management of the value of information security?
An online trading company discovers that a network attack has penetrated the firewall. What should be the information security manager's FIRST response?
Which of the following should be the FIRST consideration when developing a strategy for protecting an organization's data?
Which of the following is the MOST important reason to involve external forensics experts in evidence collection when responding to a major security breach?
Which of the following should an information security manager do FIRST when noncompliance with security standards is identified?
Which of the following is the BEST way to determine if an information security profile is aligned with business requirements?
An experienced information security manager joins a new organization and begins by conducting an audit of all key IT processes. Which of the following findings about the vulnerability management program should be of GREATEST concern?
Which of the following BEST enables an organization to enhance its incident response plan processes and procedures?
An organization has introduced a new bring your own device (BYOD) program. The security manager has determined that a small number of employees are utilizing free cloud storage services to store company data through their mobile devices. Which of the following is the MOST effective course of action?
Following an information security risk assessment of a critical system, several significant issues have been identified. Which of the following is MOST important for the information security manager to confirm?
Which of the following would MOST effectively ensure that a new server is appropriately secured?
A business unit recently integrated the organization's new strong password policy into its business application which requires users to reset passwords every 30 days. The help desk is now flooded with password reset requests. Which of the following is the information security manager's BEST course of action to address this situation?
Recommendations for enterprise investment in security technology should be PRIMARILY based on:
Which of the following is the PRIMARY role of an information security manager in a software development project?
Which of the following is the MOST important factor in an organization's selection of a key risk indicator (KRI)?
An organization's HR department requires that employee account privileges be removed from all corporate IT systems within three days of termination to comply with a government regulation However, the systems all have different user directories, and it currently takes up to four weeks to remove the privileges Which of the following would BEST enable regulatory compliance?
A new type of ransomware has infected an organization's network. Which of the following would have BEST enabled the organization to detect this situation?
Which of the following BEST minimizes information security risk in deploying applications to the production environment?
How would the information security program BEST support the adoption of emerging technologies?
Reviewing which of the following would be MOST helpful when a new information security manager is developing an information security strategy for a non-regulated organization?
During the due diligence phase of an acquisition, the MOST important course of action for an information security manager is to:
Which of the following is the GREATEST inherent risk when performing a disaster recovery plan (DRP) test?
An organization has discovered that a server processing real-time visual data could be vulnerable to a lateral movement stage in a ransomware attack. Which of the following controls BEST mitigates this vulnerability?
Which of the following is the MOST appropriate action during the containment phase of a cyber incident response?
Which of the following is MOST useful to an information security manager when determining the need to escalate an incident to senior?
Which of the following BEST enables an organization to transform its culture to support information security?
Which of the following security processes will BEST prevent the exploitation of system vulnerabilities?
An organization is considering using a third party to host sensitive archived data. Which of the following is MOST important to verify before entering into the relationship?
Management decisions concerning information security investments will be MOST effective when they are based on:
To overcome the perception that security is a hindrance to business activities, it is important for an information security manager to:
After a ransomware incident an organization's systems were restored. Which of the following should be of MOST concern to the information security manager?
Which of the following roles is accountable for ensuring the impact of a new regulatory framework on a business system is assessed?
Which of the following is the MOST important reason to consider organizational culture when developing an information security program?
Who is BEST suited to determine how the information in a database should be classified?
Which of the following is the PRIMARY objective of testing security controls within a critical infrastructure?
Which of the following has the GREATEST impact on the ability to successfully execute a disaster recovery plan (DRP)?
An organization is aligning its incident response capability with a public cloud service provider. What should be the information security manager's FIRST course of action?
Which of the following is an information security manager's BEST course of action when a penetration test reveals a security exposure due to a firewall that is not configured correctly?
When integrating security risk management into an organization it is MOST important to ensure:
Application data integrity risk is MOST directly addressed by a design that includes:
Which of the following is the PRIMARY benefit of implementing an information security governance framework?
Which of the following components of an information security risk assessment is MOST valuable to senior management?
Meeting which of the following security objectives BEST ensures that information is protected against unauthorized disclosure?
Which of the following would BEST justify continued investment in an information security program?
Which of the following is the BEST method to ensure compliance with password standards?
Which of the following should be the NEXT step after a security incident has been reported?
Which of the following should be the PRIMARY objective of an information security governance framework?
The GREATEST challenge when attempting data recovery of a specific file during forensic analysis is when:
Which of the following is the BEST way to help ensure an organization's risk appetite will be considered as part of the risk treatment process?
Which of the following is CRITICAL to ensure the appropriate stakeholder makes decisions during a cybersecurity incident?
What type of control is being implemented when a security information and event management (SIEM) system is installed?
Which of the following is the PRIMARY reason to review the firewall logs when an external network-based attack is reported by the intrusion detection system (IDS)?
Which of the following is the MOST important objective when planning an incident response program?
An organization's automated security monitoring tool generates an excessively large amount of falsq positives. Which of the following is the BEST method to optimize the monitoring process?
What is the PRIMARY objective of performing a vulnerability assessment following a business system update?
Which of the following is MOST important to consider when determining asset valuation?
When drafting the corporate privacy statement for a public website, which of the following MUST be included?
Which of the following is the MOST important benefit of using a cloud access security broker when migrating to a cloud environment?
Which of the following BEST enables an organization to maintain legally admissible evidence7
Which of the following is the GREATEST benefit of conducting an organization-wide security awareness program?
An incident response team recently encountered an unfamiliar type of cyber event. Though the team was able to resolve the issue, it took a significant amount of time to identify. What is the BEST way to help ensure similar incidents are identified more quickly in the future?
Which of the following should an information security manager do FIRST when a vulnerability has been disclosed?
A new information security reporting requirement will soon become effective. Which of the following should be the information security manager's FIRST action?
Which of the following is the BEST evidence of alignment between corporate and information security governance?
Which of the following is the PRIMARY reason for an information security manager to periodically review existing controls?
Which of the following should be the PRIMARY focus of a status report on the information security program to senior management?
Which of the following is the BEST technical defense against unauthorized access to a corporate network through social engineering?
Which of the following is the MOST likely reason for a vulnerability scanner to return incomplete results?
An organization plans to utilize Software as a Service (SaaS) and is in the process of selecting a vendor. What should the information security manager do FIRST to support this initiative?
The BEST way to report to the board on the effectiveness of the information security program is to present:
Which of the following is MOST difficult to measure following an information security breach?
Which of the following BEST helps to ensure the effective execution of an organization's disaster recovery plan (DRP)?
What should be the FIRST step when an Internet of Things (loT) device in an organization's network is confirmed to have been hacked?
The PRIMARY benefit of integrating information security activities into change management processes is to:
Following an unsuccessful denial of service (DoS) attack, identified weaknesses should be:
Which of the following is an example of a change to the external threat landscape?
Which of the following is the BEST strategy when determining an organization’s approach to risk treatment?
Which of the following should an information security manager do FIRST upon learning that some security hardening settings may negatively impact future business activity?
What is the BEST way to address vulnerabilities associated with a recent increase in the number of zero-day attacks?
The PRIMARY reason to create and externally store the disk hash value when performing forensic data acquisition from a hard disk is to:
What is the MOST important consideration when establishing metrics for reporting to the information security strategy committee?
The BEST way to identify the risk associated with a social engineering attack is to:
Which of the following BEST facilitates an information security manager's efforts to obtain senior management commitment for an information security program?
Which of the following is the MOST important characteristic of an effective information security metric?
An information security manager is updating the organization's incident response plan. Which of the following is the BEST way to validate that the process and procedures provided by IT and business units are complete, accurate, and known by all responsible teams?
Which of the following should have the MOST influence on an organization's response to a new industry regulation?
Which of the following should be done FIRST when implementing a security program?
Due to specific application requirements, a project team has been granted administrative ponieon GR: is the PRIMARY reason for ensuring clearly defined roles and responsibilities are communicated to these users?
Which of the following is the GREATEST value provided by a security information and event management (SIEM) system?
Which of the following is MOST important to determine following the discovery and eradication of a malware attack?
Which of the following provides the MOST comprehensive insight into ongoing threats facing an organization?
Which of the following BEST protects against emerging advanced persistent threat (APT) actors?
Which of the following BEST helps to ensure a risk response plan will be developed and executed in a timely manner?
Which of the following is the MOST effective way to demonstrate improvement in security performance?
Which of the following BEST enables the integration of information security governance into corporate governance?
From an information security perspective, legal issues associated with a transborder flow of technology-related items are MOST often
An incident handler is preparing a forensic image of a hard drive. Which of the following MUST be done to provide evidence that the image is an exact copy of the original?
Which of the following should be the PRIMARY basis for a severity hierarchy for information security incident classification?
Following an employee security awareness training program, what should be the expected outcome?
Which of the following is the GREATEST benefit of information asset classification?
Which of the following roles is MOST appropriate to determine access rights for specific users of an application?
Of the following, who is accountable for data loss in the event of an information security incident at a third-party provider?
Which of the following is the BEST way to evaluate the effectiveness of physical and environmental security controls implemented for fire-related disasters?
When developing security processes for handling credit card data on the business unit's information system, the information security manager should FIRST:
Which of the following is the BEST starting point for a newly hired information security manager who has been tasked with identifying and addressing network vulnerabilities?
Which of the following is the MOST important objective of post-incident review activities?
Which of the following BEST enables an organization to evaluate the security posture of a cloud service?
In which cloud model does the cloud service buyer assume the MOST security responsibility?
Which of the following is MOST helpful for protecting an enterprise from advanced persistent threats (APTs)?
When investigating an information security incident, details of the incident should be shared:
Which of the following MUST be defined in order for an information security manager to evaluate the appropriateness of controls currently in place?
During a post-incident review, it was determined that a known vulnerability was exploited in order to gain access to a system. The vulnerability was patched as part of the remediation on the offending system. Which of the following should be done NEXT?
Which of the following BEST enables an organization to provide ongoing assurance that legal and regulatory compliance requirements can be met?
Which of the following is the PRIMARY objective of a cyber resilience strategy?
An organization is in the process of defining policies for employee use of social media. It is MOST important for the information security manager to:
An organization plans to leverage popular social network platforms to promote its products and services. Which of the following is the BEST course of action for the information security manager to support this initiative?
Which of the following is the MOST important reason for logging firewall activity?
An information security manager is reporting on open items from the risk register to senior management. Which of the following is MOST important to communicate with regard to these risks?
The categorization of incidents is MOST important for evaluating which of the following?
Which of the following is the PRIMARY advantage of an organization using Disaster Recovery as a Service (DRaaS) to help manage its disaster recovery program?
An organization wants to integrate information security into its HR management processes. Which of the following should be the FIRST step?
Which of the following is the BEST way to reduce the risk associated with a bring your own device (BYOD) program?
An organization's research department plans to apply machine learning algorithms on a large data set containing customer names and purchase history. The risk of personal data leakage is considered high impact. Which of the following is the BEST risk treatment option in this situation?
In violation of a policy prohibiting the use of cameras at the office, employees have been issued smartphones and tablet computers with enabled web cameras. Which of the following should be the information security manager's FIRST course of action?
Which of the following is necessary to ensure consistent protection for an organization's information assets?
An online bank identifies a successful network attack in progress. The bank should FIRST:
Which of the following is the sole responsibility of the client organization when adopting a Software as a Service (SaaS) model?
Which of the following is the MOST important consideration when attempting to create a security-focused culture?
An organization has multiple data repositories across different departments. The information security manager has been tasked with creating an enterprise strategy for protecting data. Which of the following information security initiatives should be the HIGHEST priority for the organization?
An organization is close to going live with the implementation of a cloud-based application. Independent penetration test results have been received that show a high-rated vulnerability. Which of the following would be the BEST way to proceed?
Which of the following BEST indicates the organizational benefit of an information security solution?
What is the PRIMARY benefit to an organization when information security program requirements are aligned with employment and staffing processes?
An information security manager believes that information has been classified inappropriately, = the risk of a breach. Which of the following is the information security manager's BEST action?
Management has expressed concerns to the information security manager that shadow IT may be a risk to the organization. What is the FIRST step the information security manager should take?
An information security team plans to strengthen authentication requirements for a customer-facing site, but there are concerns it will negatively impact the user experience. Which of the following is the information security manager's BEST course of action?
Which of the following is MOST important to include in an information security policy?
An organization's security policy is to disable access to USB storage devices on laptops and desktops. Which of the following is the STRONGEST justification for granting an exception to the policy?
While classifying information assets an information security manager notices that several production databases do not have owners assigned to them What is the BEST way to address this situation?
Which of the following should be an information security manager's FIRST course of action when one of the organization's critical third-party providers experiences a data breach?
Which of the following is MOST important for guiding the development and management of a comprehensive information security program?
Which of the following tools provides an incident response team with the GREATEST insight into insider threat activity across multiple systems?
A new application has entered the production environment with deficient technical security controls. Which of the following is MOST Likely the root cause?
Which of the following is the MOST effective way to identify changes in an information security environment?
Predetermined containment methods to be used in a cybersecurity incident response should be based PRIMARILY on the:
An organization's main product is a customer-facing application delivered using Software as a Service (SaaS). The lead security engineer has just identified a major security vulnerability at the primary cloud provider. Within the organization, who is PRIMARILY accountable for the associated task?
An enterprise has decided to procure security services from a third-party vendor to support its information security program. Which of the following is MOST important to include in the vendor selection criteria?
Which of the following is the FIRST step in developing a business continuity plan (BCP)?
Which of the following BEST informs the design of an information security framework?
After a server has been attacked, which of the following is the BEST course of action?
Which of the following should be an information security manager s MOST important consideration when determining the priority for implementing security controls?
Which of the following provides an information security manager with the MOST useful information on new threats and emerging risks that could impact business objectives?
Which of the following is the BEST way to determine the gap between the present and desired state of an information security program?
Which of the following BEST enables an incident response team to determine appropriate actions during an initial investigation?
Which of the following metrics would provide an accurate measure of an information security program's performance?
Which of the following is the BEST way lo monitor for advanced persistent threats (APT) in an organization?
An incident management team leader sends out a notification that the organization has successfully recovered from a cyberattack. Which of the following should be done NEXT?
Which of the following is the BEST course of action when confidential information is inadvertently disseminated outside the organization?
Which of the following is MOST important to ensuring information stored by an organization is protected appropriately?
Which of the following should an information security manager do FIRST after a new cybersecunty regulation has been introduced?
An organization has determined that fixing a security vulnerability in a critical application is too costly to be feasible, but the impact is material to the business. Which of the following is the MOST appropriate risk treatment?
Which of the following should an information security manager do FIRST when developing an organization's disaster recovery plan (DRP)?
Which of the following would be the MOST effective way to present quarterly reports to the board on the status of the information security program?
Which of the following is MOST important to complete during the recovery phase of an incident response process before bringing affected systems back online?
Which of the following is the BEST approach when creating a security policy for a global organization subject to varying laws and regulations?
Which of the following is the MOST effective way to ensure the security of services and solutions delivered by third-party vendors?
A data discovery project uncovers an unclassified process document. Of the following, who is BEST suited to determine the classification?
Which of the following is MOST important for an information security manager to consider when developing a business continuity plan (BCP) for ransomware attacks?
When establishing classifications of security incidents for the development of an incident response plan, which of the following provides the MOST valuable input?
Which of the following events is MOST likely to require an organization to revisit its information security framework?
Which of the following is the PRIMARY reason to involve stakeholders from various business units when developing an information security policy?
Which of the following metrics would BEST demonstrate the success of a newly implemented information security framework?
Which type of policy BEST helps to ensure that all employees, contractors, and third-party users receive formal communication regarding an organization’s security program?
To ensure the information security of outsourced IT services, which of the following is the MOST critical due diligence activity?
Which of the following is MOST important to include in monthly information security reports to the board?
Which type of system is MOST effective for prioritizing cyber incidents based on impact and tracking them until they are closed?
An incident management team is alerted to a suspected security event. Before classifying the suspected event as a security incident, it is MOST important for the security manager to:
Several critical systems have been compromised with malware. Which of the following is the BEST strategy to eradicate this incident?
While responding to a high-profile security incident, an information security manager observed several deficiencies in the current incident response plan. When would be the BEST time to update the plan?
Which of the following is the BEST way to determine the effectiveness of an incident response plan?
The information security manager has been notified of a new vulnerability that affects key data processing systems within the organization Which of the following should be done FIRST?
During an information security audit, it was determined that IT staff did not follow the established standard when configuring and managing IT systems. Which of the following is the BEST way to prevent future occurrences?
Which of the following is the MOST effective way to ensure information security policies are understood?
An organization finds it necessary to quickly shift to a work-fromhome model with an increased need for remote access security.
Which of the following should be given immediate focus?
When assigning a risk owner, the MOST important consideration is to ensure the owner has:
Which of the following would BEST address the risk of a system failing to detect a breach?
A small organization has a contract with a multinational cloud computing vendor. Which of the following would present the GREATEST concern to an information security manager if omitted from the contract?
Implementing the principle of least privilege PRIMARILY requires the identification of:
What is the role of the information security manager in finalizing contract negotiations with service providers?
Which of the following is the PRIMARY responsibility of the information security function when an organization adopts emerging technologies?
Which of the following should be the GREATEST consideration when determining the recovery time objective (RTO) for an in-house critical application, database, or server?
Which of the following activities MUST be performed by an information security manager for change requests?
Which of the following is the PRIMARY responsibility of an information security manager in an organization that is implementing the use of company-owned mobile devices in its operations?
Which of the following is MOST important when developing an information security strategy?
Which of the following is MOST important to maintain integration among the incident response plan, business continuity plan (BCP). and disaster recovery plan (DRP)?
What should be the NEXT course of action when an information security manager has identified a department that is repeatedly not following the security policy?
The BEST way to integrate information security governance with corporate governance is to ensure:
Which of the following is the MOST important reason to document information security incidents that are reported across the organization?
Which of the following should be established FIRST when implementing an information security governance framework?
Which of the following is the MOST important factor of a successful information security program?
Which of the following roles is BEST suited to validate user access requirements during an annual user access review?
Which of the following will ensure confidentiality of content when accessing an email system over the Internet?
Which of the following is the GREATEST benefit of classifying information security incidents?
Once a suite of security controls has been successfully implemented for an organization's business units, it is MOST important for the information security manager to:
Due to changes in an organization's environment, security controls may no longer be adequate. What is the information security manager's BEST course of action?
Which of the following is the BEST control to protect customer personal information that is stored in the cloud?
Which of the following is an information security manager's MOST important course of action after receiving information about a new cybersecurity threat?
When remote access is granted to a company's internal network, the MOST important consideration should be that access is provided:
An organization wants to migrate a proprietary application to be hosted by a third-party cloud hosting provider using a Platform as a Service (PaaS) model. Prior to selecting the cloud provider, what is MOST important for the organization to ensure?
Which of the following is the BEST way to ensure data is not co-mingled or exposed when using a cloud service provider?
Prior to implementing a bring your own device (BYOD) program, it is MOST important to:
Which of the following is MOST important to the effectiveness of an information security program?
An information security manager is alerted to multiple security incidents across different business units, with unauthorized access to sensitive data and potential data exfiltration from critical systems. Which of the following is the BEST course of action to appropriately classify and prioritize these incidents?
An information security manager wants to document requirements detailing the minimum security controls required for user workstations. Which of the following resources would be MOST appropriate for this purposed?
An organization has an ongoing security awareness training program. Employee participation has been decreasing over the year, while the number of malware and phishing incidents from email has been increasing. What is the information security manager's BEST course of action?
Communicating which of the following would be MOST helpful to gain senior management support for risk treatment options?
Which of the following is the MOST important input to the development of an effective information security strategy?
What should be an information security manager's MOST important consideration when developing a multi-year plan?
The MOST important reason for having an information security manager serve on the change management committee is to:
Which of the following should be done FIRST after a ransomware incident has been successfully contained?
Which of the following should an information security manager do FIRST after discovering that a business unit has implemented a newly purchased application and bypassed the change management process?
Which of the following BEST indicates misalignment of security policies with business objectives?
Which of the following has the GREATEST impact on the effectiveness of an organization’s security posture?
Which of the following is the PRIMARY objective of a business impact analysis (BIA)?
An information security manager is concerned with continued security policy violations in a particular business unit despite recent efforts to rectify the situation. What is the BEST course of action?
An organization has decided to implement an Internet of Things (IoT) solution to remain competitive in the market. Which of the following should information security do FIRST?
The GREATEST benefit of an effective information security awareness program is the organization’s ability to:
Which of the following would be MOST useful when determining the business continuity strategy for a large organization's data center?
Which of the following BEST facilitates the development of a comprehensive information security policy?
Which of the following is MOST important for the information security manager to include when presenting changes in the security risk profile to senior management?
Which of the following BEST indicates the effectiveness of a recent information security awareness campaign delivered across the organization?
Which of the following has the GREATEST impact on efforts to improve an organization's security posture?
A finance department director has decided to outsource the organization's budget application and has identified potential providers. Which of the following actions should be initiated FIRST by IN information security manager?
An organization has implemented controls to mitigate risks resulting from identified vulnerabilities in an application. Which of the following is the BEST way to verify all weaknesses have been addressed?
Which of the following should be done FIRST when establishing a new data protection program that must comply with applicable data privacy regulations?
Which of the following BEST indicates that an organization has effectively tested its business continuity and disaster recovery plans within the stated recovery time objectives (RTOs)?
The information security manager of a multinational organization has been asked to consolidate the information security policies of its regional locations. Which of the following would be of
GREATEST concern?
Which of the following is MOST important to have in place to help ensure an organization's cybersecurity program meets the needs of the business?
Which of the following tasks should be performed once a disaster recovery plan (DRP) has been developed?
An organization has updated its business goals in the middle of the fiscal year to respond to changes in market conditions. Which of the following is MOST important for the information security manager to update in support of the new goals?
An information security team is planning a security assessment of an existing vendor. Which of the following approaches is MOST helpful for properly scoping the assessment?
Which of the following is MOST effective in monitoring an organization's existing risk?
Which of the following would BEST support the business case for an increase in the information security budget?
To help ensure that an information security training program is MOST effective, its contents should be:
Which of the following would be an information security managers PRIMARY challenge when deploying a bring your own device (BYOD) mobile program in an enterprise?
Which of the following should be the PRIMARY basis for establishing metrics that measure the effectiveness of an information security program?
Which of the following should be done FIRST when establishing an information security governance framework?
To help users apply appropriate controls related to data privacy regulation, what is MOST important to communicate to the users?
Which of the following is the BEST approach for managing user access permissions to ensure alignment with data classification?
Which of the following is MOST important to consider when choosing a shared alternate location for computing facilities?
An organization is planning to engage a third-party service provider to develop custom software. Which of the following would help to provide the GREATEST assurance of software security?
Which of the following should have the MOST influence on the development of information security policies?
Which of the following is MOST helpful to identify whether information security policies have been followed?
Which of the following should be updated FIRST when aligning the incident response plan with the corporate strategy?
Determining the risk for a particular threat/vulnerability pair before controls are applied can be expressed as:
Which of the following is MOST important to have in place when conducting a security control assessment of a system?
Which of the following BEST indicates that an information security governance framework has been successfully implemented?
Which of the following should an organization do FIRST upon learning that a subsidiary is located in a country where civil unrest has just begun?
In order to gain organization-wide support for an information security program, which of the following is MOST important to consider?
To prepare for a third-party forensics investigation following an incident involving malware, the incident response team should:
Which of the following is MOST important when designing security controls for new cloud-based services?
An information security team has confirmed that threat actors are taking advantage of a newly announced critical vulnerability within an application. Which of the following should be done
FIRST?
Of the following, who is BEST suited to own the risk discovered in an application?
Which of the following is the BEST way to ensure the organization's security objectives are embedded in business operations?
Which of the following is MOST important to consider when aligning a security awareness program with the organization's business strategy?
An employee of an organization has reported losing a smartphone that contains sensitive information The BEST step to address this situation is to:
Which of the following is MOST important to emphasize when presenting information to gain senior management support for control enhancements?
Which of the following is the GREATEST challenge with assessing emerging risk in an organization?
Which of the following should be of GREATEST concern to an information security manager when evaluating a cloud service provider?
Which of the following is MOST important for an information security manager to consider when determining whether data should be stored?
Which type of plan is PRIMARILY intended to reduce the potential impact of security events that may occur?
Which of the following is the MOST important requirement for a successful security program?
DumpsMate's team of experts is always available to respond your queries on exam preparation. Get professional answers on any topic of the certification syllabus. Our experts will thoroughly satisfy you.
TESTED 22 Mar 2026
