- (Exam Topic 6)
What organizational structure combines the functional and project structures to create a hybrid of the two?

1. A. Traditional
2. B. Composite
3. C. Project
4. D. Matrix

Correct Answer: D
Reference: https://www.knowledgehut.com/tutorials/project-management/organization-structures

- (Exam Topic 1)
Payment Card Industry (PCI) compliance requirements are based on what criteria?

1. A. The types of cardholder data retained
2. B. The duration card holder data is retained
3. C. The size of the organization processing credit card data
4. D. The number of transactions performed per year by an organization

Correct Answer: D

- (Exam Topic 3)
The organization does not have the time to remediate the vulnerability; however it is critical to release the application. Which of the following needs to be further evaluated to help mitigate the risks?

1. A. Provide developer security training
2. B. Deploy Intrusion Detection Systems
3. C. Provide security testing tools
4. D. Implement Compensating Controls

Correct Answer: D

- (Exam Topic 1)
Which of the following is a critical operational component of an Incident Response Program (IRP)?

1. A. Weekly program budget reviews to ensure the percentage of program funding remains constant.
2. B. Annual review of program charters, policies, procedures and organizational agreements.
3. C. Daily monitoring of vulnerability advisories relating to your organization’s deployed technologies.
4. D. Monthly program tests to ensure resource allocation is sufficient for supporting the needs of the organization

Correct Answer: C

- (Exam Topic 2)
Your IT auditor is reviewing significant events from the previous year and has identified some procedural oversights. Which of the following would be the MOST concerning?

1. A. Lack of notification to the public of disclosure of confidential information.
2. B. Lack of periodic examination of access rights
3. C. Failure to notify police of an attempted intrusion
4. D. Lack of reporting of a successful denial of service attack on the network.

Correct Answer: A