Question 1

As the CISO, you have been tasked with the execution of the company's key management program. You

MUST ensure the integrity of encryption keys at the point of generation. Which principal of encryption key

control will ensure no single individual can constitute or re-constitute a key?

Options :

A : Dual Control

B : Separation of Duties

C : Split Knowledge

D : Least Privilege

Answer: A

Question 2

Which of the following terms is used to describe countermeasures implemented to minimize risks to physicalproperty, information, and computing systems?

Options :

A : Security frameworks

B : Security policies

C : Security awareness

D : Security controls

Answer: D

Question 3

Which International Organization for Standardization (ISO) below BEST describes the performance of risk management, and includes a five-stage risk management methodology.

Options :

A : ISO 27001

B : ISO 27002

C : ISO 27004

D : ISO 27005

Answer: D

Question 4

Which of the following information may be found in table top exercises for incident response?

Options :

A : Security budget augmentation

B : Process improvements

C : Real-time to remediate

D : Security control selection

Answer: B

Question 5

Developing effective security controls is a balance between:

Options :

A : Risk Management and Operations

B : Corporate Culture and Job Expectations

C : Operations and Regulations

D : Technology and Vendor Management

Answer: A