NO.249 As a CISO you need to understand the steps that are used to perform an attack against a network. Put each step into the correct order.
1. Covering tracks
2. Scanning and enumeration
3. Maintaining Access
4. Reconnaissance
5. Gaining Access

NO.250 When creating contractual agreements and procurement processes why should security requirements be included?

NO.251 Scenario: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified. The CISO has validated audit findings, determined if compensating controls exist, and started initial remediation planning.
Which of the following is the MOST logical next step?

NO.252 Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.
The CISO has been able to implement a number of technical controls and is able to influence the Information Technology teams but has not been able to influence the rest of the organization.
From an organizational perspective, which of the following is the LIKELY reason for this?

NO.253 Scenario: You are the CISO and are required to brief the C-level executive team on your information security audit for the year. During your review of the audit findings you discover that many of the controls that were put in place the previous year to correct some of the findings are not performing as needed. You have thirty days until the briefing.
To formulate a remediation plan for the non-performing controls what other document do you need to review before adjusting the controls?

NO.254 What is an approach to estimating the strengths and weaknesses of alternatives used to determine options, which provide the BEST approach to achieving benefits while preserving savings called?

NO.255 What is defined as the friction or opposition resulting from actual or perceived differences or incompatibilities?

NO.256 When a critical vulnerability has been discovered on production systems and needs to be fixed immediately, what is the BEST approach for a CISO to mitigate the vulnerability under tight budget constraints?

NO.257 Which of the following are necessary to formulate responses to external audit findings?

NO.258 Within an organization’s vulnerability management program, who has the responsibility to implement remediation actions?

NO.259 The primary purpose of a risk register is to:

NO.260 Which of the following is a PRIMARY task of a risk management function within the security program?

NO.261 Which of the following activities is the MAIN purpose of the risk assessment process?

NO.262 During a cyber incident, which non-security personnel might be needed to assist the security team?

NO.263 Which of the following would negatively impact a log analysis of a multinational organization?

NO.264 Knowing the potential financial loss an organization is willing to suffer if a system fails is a determination of which of the following?

NO.265 Which of the following is NOT an approach for ethical decision making?

NO.266 Human resource planning for security professionals in your organization is a:

NO.267 When performing a forensic investigation, what are the two MOST common data sources for obtaining evidence from a computer and mobile devices?

NO.268 What is the MAIN reason for conflicts between Information Technology and Information Security programs?

NO.269 A business unit within your organization intends to deploy a new technology in violation of information security standards. As a security leader, what would be your BEST course of action?

NO.270 When dealing with Security Incident Response procedures, which of the following steps come FIRST when reacting to an incident?

NO.271 An application vulnerability assessment has identified a security flaw in an application. This is a flaw that was previously identified and remediated on a prior release of the application. Which of the following is MOST likely the reason for this recurring issue?

NO.272 The patching and monitoring of systems on a consistent schedule is required by?