- (Exam Topic 5)
SCENARIO: Critical servers show signs of erratic behavior within your organization’s intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security
Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team.
What phase of the response provides measures to reduce the likelihood of an incident from recurring?

1. A. Response
2. B. Investigation
3. C. Recovery
4. D. Follow-up

Correct Answer: D

- (Exam Topic 5)
Scenario: The new CISO was informed of all the Information Security projects that the section has in progress. Two projects are over a year behind schedule and way over budget.
Using the best business practices for project management, you determine that the project correctly aligns with the organization goals. What should be verified next?

1. A. Scope
2. B. Budget
3. C. Resources
4. D. Constraints

Correct Answer: A

- (Exam Topic 6)
An organization recently acquired a Data Loss Prevention (DLP) solution, and two months after the implementation, it was found that sensitive data was posted to numerous Dark Web sites. The DLP application was checked, and there are no apparent malfunctions and no errors.
What is the MOST likely reason why the sensitive data was posted?

1. A. The DLP Solution was not integrated with mobile device anti-malware
2. B. Data classification was not properly performed on the assets
3. C. The sensitive data was not encrypted while at rest
4. D. A risk assessment was not performed after purchasing the DLP solution

Correct Answer: D

- (Exam Topic 5)
Which of the following provides an independent assessment of a vendor’s internal security controls and overall posture?

1. A. Alignment with business goals
2. B. ISO27000 accreditation
3. C. PCI attestation of compliance
4. D. Financial statements

Correct Answer: B

- (Exam Topic 1)
Which of the following represents the HIGHEST negative impact resulting from an ineffective security governance program?

1. A. Reduction of budget
2. B. Decreased security awareness
3. C. Improper use of information resources
4. D. Fines for regulatory non-compliance

Correct Answer: D