Which of the following MUST happen immediately following the identification of a malware incident?

1. A. Preparation
2. B. Recovery
3. C. Containment
4. D. Eradication

Correct Answer: B

Which of the following service offerings in a typical Infrastructure as a Service (laaS) model will BEST enable a cloud service provider to assist customers when recovering from a security incident?

1. A. Availability of web application firewall logs.
2. B. Capability of online virtual machine analysis
3. C. Availability of current infrastructure documentation
4. D. Capability to take a snapshot of virtual machines

Correct Answer: D

Which of the following is the BEST approach to reduce unnecessary duplication of compliance activities?

1. A. Documentation of control procedures
2. B. Standardization of compliance requirements
3. C. Automation of controls
4. D. Integration of assurance efforts

Correct Answer: B

Security administration efforts will be greatly reduced following the deployment of which of the following techniques?

1. A. Discretionary access control
2. B. Role-based access control
3. C. Access control lists
4. D. Distributed access control

Correct Answer: B

A recovery point objective (RPO) is required in which of the following?

1. A. Disaster recovery plan (DRP)
2. B. Information security plan
3. C. Incident response plan
4. D. Business continuity plan (BCP)

Correct Answer: A