- (Exam Topic 2)
An organization is required to implement background checks on all employees with access to databases containing credit card information. This is considered a security

1. A. Procedural control
2. B. Management control
3. C. Technical control
4. D. Administrative control

Correct Answer: B

- (Exam Topic 4)
The process of identifying and classifying assets is typically included in the

1. A. Threat analysis process
2. B. Asset configuration management process
3. C. Business Impact Analysis
4. D. Disaster Recovery plan

Correct Answer: B

- (Exam Topic 3)
To get an Information Security project back on schedule, which of the following will provide the MOST help?

1. A. Upper management support
2. B. More frequent project milestone meetings
3. C. Stakeholder support
4. D. Extend work hours

Correct Answer: A

- (Exam Topic 5)
Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.
The CISO has been able to implement a number of technical controls and is able to influence the Information Technology teams but has not been able to influence the rest of the organization. From an organizational perspective, which of the following is the LIKELY reason for this?

1. A. The CISO does not report directly to the CEO of the organization
2. B. The CISO reports to the IT organization
3. C. The CISO has not implemented a policy management framework
4. D. The CISO has not implemented a security awareness program

Correct Answer: B

- (Exam Topic 5)
What is the difference between encryption and tokenization?

1. A. Tokenization combined with hashing is always better than encryption
2. B. Encryption can be mathematically reversed to provide the original information
3. C. The token contains the all original information
4. D. Tokenization can be mathematically reversed to provide the original information

Correct Answer: B
Reference:
http://library.ahima.org/doc?oid=104090#.X_dwWolR3eQ