- (Exam Topic 4)
An organization has an approved bring your own device (BYOD) policy. Which of the following would BEST mitigate the security risk associated with the inappropriate use of enterprise applications on the devices?

1. A. Periodically review application on BYOD devices
2. B. Include BYOD in organizational awareness programs
3. C. Implement BYOD mobile device management (MDM) controls.
4. D. Enable a remote wee capability for BYOD devices

Correct Answer: C

- (Exam Topic 4)
Which of the following resources is MOST helpful to a risk practitioner when updating the likelihood rating in the risk register?

1. A. Risk control assessment
2. B. Audit reports with risk ratings
3. C. Penetration test results
4. D. Business impact analysis (BIA)

Correct Answer: D

- (Exam Topic 4)
When performing a risk assessment of a new service to support a core business process, which of the following should be done FIRST to ensure continuity of operations?

1. A. Define metrics for restoring availability.
2. B. Identify conditions that may cause disruptions.
3. C. Review incident response procedures.
4. D. Evaluate the probability of risk events.

Correct Answer: B

- (Exam Topic 2)
Which of the following is the BEST key performance indicator (KPI) to measure the effectiveness of a vulnerability management process?

1. A. Percentage of vulnerabilities remediated within the agreed service level
2. B. Number of vulnerabilities identified during the period
3. C. Number of vulnerabilities re-opened during the period
4. D. Percentage of vulnerabilities escalated to senior management

Correct Answer: A

- (Exam Topic 3)
When a high-risk security breach occurs, which of the following would be MOST important to the person responsible for managing the incident?

1. A. An analysis of the security logs that illustrate the sequence of events
2. B. An analysis of the impact of similar attacks in other organizations
3. C. A business case for implementing stronger logical access controls
4. D. A justification of corrective action taken

Correct Answer: B