Q66. Information Security is often considered an excessive, after-the-fact cost when a project or initiative is completed. What can be done to ensure that security is addressed cost effectively?

Q67. The ability to hold intruders accountable in a court of law is important. Which of the following activities are needed to ensure the highest possibility for successful prosecution?

Q68. In accordance with best practices and international standards, how often is security awareness training provided to employees of an organization?

Q69. Which of the following is of MOST importance when security leaders of an organization are required to align security to influence the culture of an organization?

Q70. Which of the following methodologies references the recommended industry standard that Information security project managers should follow?

Q71. A security manager has created a risk program. Which of the following is a critical part of ensuring the program is successful?

Q72. The Information Security Management program MUST protect:

Q73. An organization is required to implement background checks on all employees with access to databases containing credit card information. This is considered a security___________.

Q74. Which wireless encryption technology makes use of temporal keys?

Q75. Which of the following is MOST important when dealing with an Information Security Steering committee?

Q76. Scenario: Your program is developed around minimizing risk to information by focusing on people, technology, and operations.
An effective way to evaluate the effectiveness of an information security awareness program for end users, especially senior executives, is to conduct periodic:

Q77. When creating a vulnerability scan schedule, who is the MOST critical person to communicate with in order to ensure impact of the scan is minimized?

Q78. The process to evaluate the technical and non-technical security controls of an IT system to validate that a given design and implementation meet a specific set of security requirements is called

Q79. Risk appetite directly affects what part of a vulnerability management program?

Q80. Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and dat a. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN.
The organization wants a more permanent solution to the threat to user credential compromise through phishing. What technical solution would BEST address this issue?

Q81. After a risk assessment is performed, a particular risk is considered to have the potential of costing the organization 1.2 Million USD.
This is an example of____________.