- (Exam Topic 5)
Involvement of senior management is MOST important in the development of:

1. A. IT security implementation plans.
2. B. Standards and guidelines.
3. C. IT security policies.
4. D. IT security procedures.

Correct Answer: C

- (Exam Topic 5)
When analyzing and forecasting a capital expense budget what are not included?

1. A. Network connectivity costs
2. B. New datacenter to operate from
3. C. Upgrade of mainframe
4. D. Purchase of new mobile devices to improve operations

Correct Answer: A

- (Exam Topic 1)
The framework that helps to define a minimum standard of protection that business stakeholders must attempt to achieve is referred to as a standard of:

1. A. Due Protection
2. B. Due Care
3. C. Due Compromise
4. D. Due process

Correct Answer: B

- (Exam Topic 1)
You have implemented a new security control. Which of the following risk strategy options have you engaged in?

1. A. Risk Avoidance
2. B. Risk Acceptance
3. C. Risk Transfer
4. D. Risk Mitigation

Correct Answer: D

- (Exam Topic 2)
Which of the following is a fundamental component of an audit record?

1. A. Date and time of the event
2. B. Failure of the event
3. C. Originating IP-Address
4. D. Authentication type

Correct Answer: A