One of your executives needs to send an important and confidential email. You want to ensure that the message cannot be read by anyone but the recipient. Which of the following keys should be used to encrypt the message?
During a cyber incident, which non-security personnel might be needed to assist the security team?
Which of the following are primary concerns for management with regard to assessing internal control objectives?
As the CISO, you are the project sponsor for a highly visible log management project. The objective of the project is to centralize all the enterprise logs into a security information and event management (SIEM) system. You requested the results of the performance quality audits activity.
The performance quality audit activity is done in what project management process group?
ABC Limited has recently suffered a security breach with customers’ social security number available on the dark web for sale. The CISO, during the time of the incident, has been fired, and you have been hired as the replacement. The analysis of the breach found that the absence of an insider threat program, lack of least privilege policy, and weak access control was to blame. You would like to implement key performance indicators to mitigate the risk.
Which metric would meet the requirement?
A CISO wants to change the defense strategy to ward off attackers. To accomplish this the CISO is looking to a strategy where attackers are lured into a zone of a safe network where attackers can be monitored, controlled, quarantined, or eradicated.
To have accurate and effective information security policies how often should the CISO review the organization policies?
What is the MAIN responsibility of the purple security testing team?
In which of the following cases, would an organization be more prone to risk acceptance vs. risk mitigation?
Which of the following is the MOST logical method of deploying security controls within an organization?
