Question 1

The total cost of security controls should:

Options :

A : Be equal to the value of the information resource being protected

B : Be greater than the value of the information resource being protected

C : Be less than the value of the information resource being protected

D : Should not matter, as long as the information resource is protected

Answer: C

Question 2

Physical security measures typically include which of the following components?

Options :

A : Physical, Technical, Operational

B : Technical, Strong Password, Operational

C : Operational, Biometric, Physical

D : Strong password, Biometric, Common Access Card

Answer: A

Question 3

An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System. Which of the following international standards can BEST assist this organization?

Options :

A : International Organization for Standardizations -- 27004 (ISO-27004)

B : Payment Card Industry Data Security Standards (PCI-DSS)

C : Control Objectives for Information Technology (COBIT)

D : International Organization for Standardizations -- 27005 (ISO-27005)

Answer: A

Question 4

An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System. Which of the following international standards can BEST assist this organization?

Options :

A : International Organization for Standardizations -- 27004 (ISO-27004)

B : Payment Card Industry Data Security Standards (PCI-DSS)

C : Control Objectives for Information Technology (COBIT)

D : International Organization for Standardizations -- 27005 (ISO-27005)

Answer: A

Question 5

Bob waits near a secured door, holding a box. He waits until an employee walks up to the secured door anduses the special card in order to access the restricted area of the target company. Just as the employee opensthe door, Bob walks up to the employee (still holding the box) and asks the employee to hold the door open sothat he can enter. What is the best way to undermine the social engineering activity of tailgating?

Options :

A : Post a sign that states, ''no tailgating'' next to the special card reader adjacent to the secure door

B : Issue special cards to access secure doors at the company and provide a one-time only brief description ofuse of the special card

C : Educate and enforce physical security policies of the company to all the employees on a regular basis

D : Setup a mock video camera next to the special card reader adjacent to the secure door

Answer: C