NEW QUESTION 166
Which of the following would BEST enable effective decision-making?

NEW QUESTION 167
Which of the following is MOST likely to be discretionary?

NEW QUESTION 168
An organization provides information to its supply chain partners and customers through an extranet infrastructure. Which of the following should be the GREATEST concern to an IS auditor reviewing the firewall security architecture?

NEW QUESTION 169
Which of the following is the MOST important action to take when engaging third-party consultants to conduct an attack and penetration test?

NEW QUESTION 170
Which of the following is characteristic of decentralized information security management across a geographically dispersed organization?

NEW QUESTION 171
Which of the following defines the triggers within a business continuity plan (BCP)?

NEW QUESTION 172
Before conducting a formal risk assessment of an organization’s information resources, an information security manager should FIRST:

NEW QUESTION 173
Which of the following is the MOST effective way of ensuring that business units comply with an information security governance framework?

NEW QUESTION 174
Which of the following BEST illustrates residual risk within an organization?

NEW QUESTION 175
Presenting which of the following to senior management will be MOST helpful in securing ongoing support for the information security strategy?

NEW QUESTION 176
In a well-controlled environment, which of the following activities is MOST likely to lead to the introduction of weaknesses in security software?

NEW QUESTION 177
Which of the following is the MOST usable deliverable of an information security risk analysis?

NEW QUESTION 178
An information security strategy document that includes specific links to an organization’s business activities is PRIMARILY an indicator of:

NEW QUESTION 179
Human resources (HR) is evaluating potential Software as a Service (SaaS) cloud services. Which of the following should the information security manager do FIRST to support this effort?

NEW QUESTION 180
The impact of losing frame relay network connectivity for 18-24 hours should be calculated using the:

NEW QUESTION 181
An organization has decided to conduct a postmortem analysis after experiencing a loss from an information security attack. The PRIMARY purpose of this analysis should be to:

NEW QUESTION 182
Which of the following is the BEST way to determine if a recent investment in access control software was successful?

NEW QUESTION 183
Which of the following would be MOST helpful to the information security manager tasked with enforcing enhanced password standards?

NEW QUESTION 184
An organization provides information to its supply chain partners and customers through an extranet infrastructure. Which of the following should be the GREATEST concern to an IS auditor reviewing the firewall security architecture?

NEW QUESTION 185
While implementing information security governance an organization should FIRST:

NEW QUESTION 186
A core business unit relies on an effective legacy system that does not meet the current security standards and threatens the enterprise network. Which of the following is the BEST course of action to address the situation?

NEW QUESTION 187
Which of the following will BEST protect against malicious activity by a former employee?

NEW QUESTION 188
What is the PRIMARY purpose of an unannounced disaster recovery exercise?

NEW QUESTION 189
An organization is entering into an agreement with a new business partner to conduct customer mailings.
What is the MOST important action that the information security manager needs to perform?