- (Exam Topic 3)
Which of the following best summarizes the primary goal of a security program?

1. A. Provide security reporting to all levels of an organization
2. B. Create effective security awareness to employees
3. C. Manage risk within the organization
4. D. Assure regulatory compliance

Correct Answer: C

- (Exam Topic 3)
When operating under severe budget constraints a CISO will have to be creative to maintain a strong security organization. Which example below is the MOST creative way to maintain a strong security posture during these difficult times?

1. A. Download open source security tools and deploy them on your production network
2. B. Download trial versions of commercially available security tools and deploy on your production network
3. C. Download open source security tools from a trusted site, test, and then deploy on production network
4. D. Download security tools from a trusted source and deploy to production network

Correct Answer: C

- (Exam Topic 5)
Which of the following is a primary method of applying consistent configurations to IT systems?

1. A. Audits
2. B. Administration
3. C. Patching
4. D. Templates

Correct Answer: C

- (Exam Topic 4)
Your incident handling manager detects a virus attack in the network of your company. You develop a signature based on the characteristics of the detected virus. Which of the following phases in the incident handling process will utilize the signature to resolve this incident?

1. A. Containment
2. B. Recovery
3. C. Identification
4. D. Eradication

Correct Answer: D

- (Exam Topic 4)
What is the term describing the act of inspecting all real-time Internet traffic (i.e., packets) traversing a major Internet backbone without introducing any apparent latency?

1. A. Traffic Analysis
2. B. Deep-Packet inspection
3. C. Packet sampling
4. D. Heuristic analysis

Correct Answer: B