Question 1

As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building. Below your office window you notice a door that is normally propped open during the day for groups of people to take breaks outside. Upon looking closer you see there is no badge reader. What should you do?

Options :

A : Nothing, this falls outside your area of influence.

B : Close and chain the door shut and send a company-wide memo banning the practice.

C : Have a risk assessment performed.

D : Post a guard at the door to maintain physical security

Answer: C

Question 2

Which of the following is MOST important when dealing with an Information Security Steering committee:

Options :

A : Include a mix of members from different departments and staff levels.

B : Ensure that security policies and procedures have been vetted and approved.

C : Review all past audit and compliance reports.

D : Be briefed about new trends and products at each meeting by a vendor.

Answer: C

Question 3

An audit was conducted and many critical applications were found to have no disaster recovery plans in place. You conduct a Business Impact Analysis (BIA) to determine impact to the company for each application. What should be the NEXT step?

Options :

A : Determine the annual loss expectancy (ALE)

B : Create a crisis management plan

C : Create technology recovery plans

D : Build a secondary hot site

Answer: C

Question 4

When deploying an Intrusion Prevention System (IPS) the BEST way to get maximum protection from the system is to deploy it

Options :

A : In promiscuous mode and only detect malicious traffic.

B : In-line and turn on blocking mode to stop malicious traffic.

C : In promiscuous mode and block malicious traffic.

D : In-line and turn on alert mode to stop malicious traffic.

Answer: B

Question 5

Physical security measures typically include which of the following components?

Options :

A : Physical, Technical, Operational

B : Technical, Strong Password, Operational

C : Operational, Biometric, Physical

D : Strong password, Biometric, Common Access Card

Answer: A