- (Topic 5)
Scenario: Your corporate systems have been under constant probing and attack from foreign IP addresses for more than a week. Your security team and security infrastructure have performed well under the stress. You are confident that your defenses have held up under the test, but rumors are spreading that sensitive customer data has been stolen and is now being sold on the Internet by criminal elements. During your investigation of the rumored compromise you discover that data has been breached and you have discovered the repository of stolen data on a server located in a foreign country. Your team now has full access to the data on the foreign server.
What action should you take FIRST?

1. A. Destroy the repository of stolen data
2. B. Contact your local law enforcement agency
3. C. Consult with other C-Level executives to develop an action plan
4. D. Contract with a credit reporting company for paid monitoring services for affected customers

Correct Answer: C

- (Topic 2)
An audit was conducted and many critical applications were found to have no disaster recovery plans in place. You conduct a Business Impact Analysis (BIA) to determine impact to the company for each application. What should be the NEXT step?

1. A. Determine the annual loss expectancy (ALE)
2. B. Create a crisis management plan
3. C. Create technology recovery plans
4. D. Build a secondary hot site

Correct Answer: C

- (Topic 2)
The risk found after a control has been fully implemented is called:

1. A. Residual Risk
2. B. Total Risk
3. C. Post implementation risk
4. D. Transferred risk

Correct Answer: A

- (Topic 1)
A company wants to fill a Chief Information Security Officer position in the organization. They need to define and implement a more holistic security program. Which of the following qualifications and experience would be MOST desirable to find in a candidate?

1. A. Multiple certifications, strong technical capabilities and lengthy resume
2. B. Industry certifications, technical knowledge and program management skills
3. C. College degree, audit capabilities and complex project management
4. D. Multiple references, strong background check and industry certifications

Correct Answer: B

- (Topic 1)
Within an organization’s vulnerability management program, who has the responsibility to implement remediation actions?

1. A. Security officer
2. B. Data owner
3. C. Vulnerability engineer
4. D. System administrator

Correct Answer: D