- (Exam Topic 1)
An organization licenses and uses personal information for business operations, and a server containing that information has been compromised. What kind of law would require notifying the owner or licensee of this incident?

1. A. Data breach disclosure
2. B. Consumer right disclosure
3. C. Security incident disclosure
4. D. Special circumstance disclosure

Correct Answer: A

- (Exam Topic 3)
An application vulnerability assessment has identified a security flaw in an application. This is a flaw that was previously identified and remediated on a prior release of the application. Which of the following is MOST likely the reason for this recurring issue?

1. A. Ineffective configuration management controls
2. B. Lack of change management controls
3. C. Lack of version/source controls
4. D. High turnover in the application development department

Correct Answer: C

- (Exam Topic 5)
As the CISO you need to write the IT security strategic plan. Which of the following is the MOST important to review before you start writing the plan?

1. A. The existing IT environment.
2. B. The company business plan.
3. C. The present IT budget.
4. D. Other corporate technology trends.

Correct Answer: B

- (Exam Topic 2)
Many times a CISO may have to speak to the Board of Directors (BOD) about their cyber security posture. What would be the BEST choice of security metrics to present to the BOD?

1. A. All vulnerabilities found on servers and desktops
2. B. Only critical and high vulnerabilities on servers and desktops
3. C. Only critical and high vulnerabilities that impact important production servers
4. D. All vulnerabilities that impact important production servers

Correct Answer: C

- (Exam Topic 4)
One of your executives needs to send an important and confidential email. You want to ensure that the message cannot be read by anyone but the recipient. Which of the following keys should be used to encrypt the message?

1. A. Your public key
2. B. The recipient's private key
3. C. The recipient's public key
4. D. Certificate authority key

Correct Answer: C