- (Exam Topic 15)
An organization's retail website provides its only source of revenue, so the disaster recovery plan (DRP) must document an estimated time for each step in the plan.
Which of the following steps in the DRP will list the GREATEST duration of time for the service to be fully operational?

1. A. Update the Network Address Translation (NAT) table.
2. B. Update Domain Name System (DNS) server addresses with domain registrar.
3. C. Update the Border Gateway Protocol (BGP) autonomous system number.
4. D. Update the web server network adapter configuration.

Correct Answer: B

- (Exam Topic 15)
During an internal audit of an organizational Information Security Management System (ISMS), nonconformities are identified. In which of the following management stages are nonconformities reviewed, assessed and/or corrected by the organization?

1. A. Planning
2. B. Operation
3. C. Assessment
4. D. Improvement

Correct Answer: B

- (Exam Topic 12)
Which of the following adds end-to-end security inside a Layer 2 Tunneling Protocol (L2TP) Internet Protocol Security (IPSec) connection?

1. A. Temporal Key Integrity Protocol (TKIP)
2. B. Secure Hash Algorithm (SHA)
3. C. Secure Shell (SSH)
4. D. Transport Layer Security (TLS)

Correct Answer: B

- (Exam Topic 13)
Which of the following mandates the amount and complexity of security controls applied to a security risk?

1. A. Security vulnerabilities
2. B. Risk tolerance
3. C. Risk mitigation
4. D. Security staff

Correct Answer: C

- (Exam Topic 10)
Refer to the information below to answer the question.
An organization has hired an information security officer to lead their security department. The officer has adequate people resources but is lacking the other necessary components to have an effective security program. There are numerous initiatives requiring security involvement.
The security program can be considered effective when

1. A. vulnerabilities are proactively identified.
2. B. audits are regularly performed and reviewed.
3. C. backups are regularly performed and validated.
4. D. risk is lowered to an acceptable level.

Correct Answer: D