In which cloud model does the cloud service buyer assume the MOST security responsibility?

1. A. Disaster Recovery as a Service (DRaaS)
2. B. Infrastructure as a Service (laaS)
3. C. Platform as a Service (PaaS)
4. D. Software as a Service (SaaS)

Correct Answer: B

Which of the following is MOST important to ensure when developing escalation procedures for an incident response plan?

1. A. Each process is assigned to a responsible party.
2. B. The contact list is regularly updated.
3. C. Minimum regulatory requirements are maintained.
4. D. Senior management approval has been documented.

Correct Answer: B

Which of the following BEST facilitates an information security manager's efforts to obtain senior management commitment for an information security program?

1. A. Presenting evidence of inherent risk
2. B. Reporting the security maturity level
3. C. Presenting compliance requirements
4. D. Communicating the residual risk

Correct Answer: C

An online bank identifies a successful network attack in progress. The bank should FIRST:

1. A. isolate the affected network segment.
2. B. report the root cause to the board of directors.
3. C. assess whether personally identifiable information (Pll) is compromised.
4. D. shut down the entire network.

Correct Answer: A

Which of the following is MOST important to consider when determining asset valuation?

1. A. Asset recovery cost
2. B. Asset classification level
3. C. Cost of insurance premiums
4. D. Potential business loss

Correct Answer: D