Exam Dumps VCE

QUESTION 126
A CISO implements smart cards for credential management, and as a result has reduced costs associated with help desk operations supporting password resets. This demonstrates which of the following principles?

QUESTION 127
Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates.
What is one proven method to account for common elements found within separate regulations and/or standards?

QUESTION 128
Which of the following is MOST useful when developing a business case for security initiatives?

QUESTION 129
The organization does not have the time to remediate the vulnerability; however it is critical to release the application. Which of the following needs to be further evaluated to help mitigate the risks?

QUESTION 130
Your company has a “no right to privacy” notice on all logon screens for your information systems and users sign an Acceptable Use Policy informing them of this condition. A peer group member and friend comes to you and requests access to one of her employee’s email account. What should you do? (choose the BEST answer):

QUESTION 131
When an organization claims it is secure because it is PCI-DSS certified, what is a good first question to ask towards assessing the effectiveness of their security program?

QUESTION 132
A recommended method to document the respective roles of groups and individuals for a given process is to:

QUESTION 133
Which of the following activities results in change requests?

QUESTION 134
Which of the following activities must be completed BEFORE you can calculate risk?

QUESTION 135
A security manager regualrly checks work areas after buisness hours for security violations; such as unsecured files or unattended computers with active sessions. This activity BEST demonstrates what part of a security program?

QUESTION 136
SCENARIO: A CISO has several two-factor authentication systems under review and selects the one that is most sufficient and least costly. The implementation project planning is completed and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization’s needs.
The CISO discovers the scalability issue will only impact a small number of network segments. What is the next logical step to ensure the proper application of risk management methodology within the two-facto implementation project?

QUESTION 137
Human resource planning for security professionals in your organization is a:

QUESTION 138
Physical security measures typically include which of the following components?

QUESTION 139
Where does bottom-up financial planning primarily gain information for creating budgets?

QUESTION 140
When dealing with Security Incident Response procedures, which of the following steps come FIRST when reacting to an incident?

QUESTION 141
A digital signature addresses which of the following concerns?

QUESTION 142
Which of the following illustrates an operational control process: