NO.19 Which of the following best represents a calculation for Annual Loss Expectancy (ALE)?

NO.20 What is the SECOND step to creating a risk management methodology according to the National Institute of Standards and Technology (NIST) SP 800-30 standard?

NO.21 In order for a CISO to have true situational awareness there is a need to deploy technology that can give a real-time view of security events across the enterprise. Which tool selection represents the BEST choice to achieve situational awareness?

NO.22 Which of the following has the GREATEST impact on the implementation of an information security governance model?

NO.23 According to ISO 27001, of the steps for establishing an Information Security Governance program listed below, which comes first?

NO.24 Which of the following will be MOST helpful for getting an Information Security project that is behind schedule back on schedule?

NO.25 Which of the following is a major benefit of applying risk levels?

NO.26 Which of the following set of processes is considered to be one of the cornerstone cycles of the International Organization for Standardization (ISO) 27001 standard?

NO.27 An organization’s firewall technology needs replaced. A specific technology has been selected that is less costly than others and lacking in some important capabilities. The security officer has voiced concerns about sensitive data breaches but the decision is made to purchase.
What does this selection indicate?

NO.28 Which of the following set of processes is considered to be one of the cornerstone cycles of the International Organization for Standardization (ISO) 27001 standard?

NO.29 What standard would you use to help determine key performance indicators?

NO.30 The effectiveness of social engineering penetration testing using phishing can be used as a Key Performance Indicator (KPI) for the effectiveness of an organization’s

NO.31 Payment Card Industry (PCI) compliance requirements are based on what criteria?

NO.32 SQL injection is a very popular and successful injection attack method. Identify the basic SQL injection text:

NO.33 Which of the following governs the manner in which users and systems communicate and engage with other systems and resources?

NO.34 The framework that helps to define a minimum standard of protection that business stakeholders must attempt to achieve is referred to as a standard of:

NO.35 SCENARIO: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified.
The CISO has implemented remediation activities. Which of the following is the MOST logical next step?

NO.36 Ensuring that the actions of a set of people, applications and systems follow the organization’s rules is BEST described as:

NO.37 Scenario: Your corporate systems have been under constant probing and attack from foreign IP addresses for more than a week. Your security team and security infrastructure have performed well under the stress. You are confident that your defenses have held up under the test, but rumors are spreading that sensitive customer data has been stolen and is now being sold on the Internet by criminal elements. During your investigation of the rumored compromise you discover that data has been breached and you have discovered the repository of stolen data on a server located in a foreign country. Your team now has full access to the data on the foreign server.
What action should you take FIRST?

NO.38 The patching and monitoring of systems on a consistent schedule is required by?

NO.39 The security team has investigated the theft/loss of several unencrypted laptop computers containing sensitive corporate information. To prevent the loss of any additional corporate data it is unilaterally decided by the CISO that all existing and future laptop computers will be encrypted. Soon, the help desk is flooded with complaints about the slow performance of the laptops and users are upset. What did the CISO do wrong? (choose the BEST answer):

NO.40 Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.
From an Information Security Leadership perspective, which of the following is a MAJOR concern about the CISO’s approach to security?

NO.41 Which of the following is MOST important when dealing with an Information Security Steering committee?

NO.42 The single most important consideration to make when developing your security program, policies, and processes is:

NO.43 A Chief Information Security Officer received a list of high, medium, and low impact audit findings. Which of the following represents the BEST course of action?