Question 1

Risk scenarios simplify the risk assessment process by:

Options :

A : covering the full range of possible risk.

B : ensuring business risk is mitigated.

C : reducing the need for subsequent risk evaluation.

D : focusing on important and relevant risk.

Answer: D

Question 2

An information security manager has contracted with a company to design security architecture for an application. Which of the following is accountable for identification associated with this initiative?

Options :

A : The project steering committee

B : The information security manager

C : The infrastructure management team

D : The application development team

Answer: B

Question 3

Which of the following is MOST helpful for aligning security operations with the IT governance framework?

Options :

A : Business impact analysis (BIA)

B : Security operations program

C : Information security policy

D : Security risk assessment

Answer: C

Question 4

Which of the following BEST ensures timely and reliable access to services?

Options :

A : Authenticity

B : Availability

C : Nonrepudiation

D : Recovery time objective (RTO)

Answer: B

Question 5

An organization has discovered a recurring problem with unsecure code being released into production. Which of the following is the information security manager action?

Options :

A : Implement segregation of duties between development and production.

B : Increase the frequency of penetration testing.

C : Review existing configuration management processes.

D : Review existing change management processes.

Answer: D