Question 1

Which of the following set the direction and scope of the security process and provide detailed instruction for its conduct?

Accepted Answer

A)   system controls
B)   technical controls 
C)   operational controls
D)   managerial controlsE) A) and B)
F) C) and D)

Question 2

A project manager who understands project management,personnel management,and InfoSec technical requirements  is needed to fill the role of a(n) ____________.

Accepted Answer

A)   ​champion 
B)   ​end user 
C)   ​team leader 
D)   ​policy developerE) B) and C)
F) C) and D)

Question 3

Penetration testing is often conducted by penetration testers-consultants or outsourced contractors who might be referred to as red teams.

Accepted Answer

A) True 
 B)False

Question 4

Enterprise risk management is a valuable approach that can better align security functions with the business mission while offering opportunities to lower costs.

Accepted Answer

A) True 
 B)False

Question 5

According to the Corporate Governance Task Force (CGTF) ,during which phase in the IDEAL model and framework does the organization plan the specifics of how it will reach its destination?

Accepted Answer

A)   Initiating
B)   Establishing 
C)   Acting
D)   LearningE) B) and D)
F) B) and C)

Question 6

Internal and external stakeholders such as customers,suppliers,or employees who interact with the information in support of their organization's planning and operations  are known as ____________.

Accepted Answer

A)   ​data owners 
B)   ​data custodians 
C)   ​data users 
D)   ​data generatorsE) None of the above
F) A) and B)

Question 7

A set of security tests and evaluations that simulate attacks by a malicious external source is known as ____________.

Accepted Answer

A)   ​vulnerability assessment 
B)   ​penetration testing 
C)   ​exploit identification 
D)   ​safeguard neutralizationE) A) and B)
F) All of the above

Question 8

The primary goal of external monitoring is to maintain an informed awareness of the state of all of the organization's networks,information systems,and information security defenses.

Accepted Answer

A) True 
 B)False

Question 9

Which type of planning is used to organize the ongoing,day-to-day performance of tasks?

Accepted Answer

A)   Strategic
B)   Tactical 
C)   Organizational
D)   OperationalE) A) and D)
F) A) and C)

Question 10

In which phase of the SecSDLC does the risk management task occur?

Accepted Answer

A)   physical design
B)   implementation 
C)   investigation
D)   analysisE) A) and B)
F) A) and C)

Question 11

Which model of SecSDLC does the work product from each phase fall into the next phase to serve as its starting point?

Accepted Answer

A)   modular continuous
B)   elementary cyclical 
C)   time-boxed circular
D)   traditional waterfallE) A) and B)
F) None of the above

Question 12

Which of the following is an information security governance responsibility of the Chief Security Officer?

Accepted Answer

A)   Communicate policies and the program 
B)   Set security policy, procedures, programs and training 
C)   Brief the board, customers and the public 
D)   Implement policy, report security vulnerabilities and breachesE) All of the above
F) B) and D)

Exam 3: Governance and Strategic Planning for Security

A set of security tests and evaluations that simulate attacks by a malicious external source is known as ____________.

Correct Answer
verified

Internal and external stakeholders such as customers,suppliers,or employees who interact with the information in support of their organization's planning and operations are known as ____________.

Correct Answer
verified

Enterprise risk management is a valuable approach that can better align security functions with the business mission while offering opportunities to lower costs.

Correct Answer
verified

In which phase of the SecSDLC does the risk management task occur?

Correct Answer
verified

Which model of SecSDLC does the work product from each phase fall into the next phase to serve as its starting point?

Correct Answer
verified

According to the Corporate Governance Task Force (CGTF) ,during which phase in the IDEAL model and framework does the organization plan the specifics of how it will reach its destination?

Correct Answer
verified

Which of the following set the direction and scope of the security process and provide detailed instruction for its conduct?

Correct Answer
verified

Which of the following is an information security governance responsibility of the Chief Security Officer?

Correct Answer
verified

Which type of planning is used to organize the ongoing,day-to-day performance of tasks?

Correct Answer
verified

The primary goal of external monitoring is to maintain an informed awareness of the state of all of the organization's networks,information systems,and information security defenses.

Correct Answer
verified

A project manager who understands project management,personnel management,and InfoSec technical requirements is needed to fill the role of a(n) ____________.

Correct Answer
verified

Penetration testing is often conducted by penetration testers-consultants or outsourced contractors who might be referred to as red teams.

Correct Answer
verified

Exam 3: Governance and Strategic Planning for Security

A set of security tests and evaluations that simulate attacks by a malicious external source is known as ____________.

Correct AnswerverifiedShow Answer

Internal and external stakeholders such as customers,suppliers,or employees who interact with the information in support of their organization's planning and operations are known as ____________.

Correct AnswerverifiedShow Answer

Enterprise risk management is a valuable approach that can better align security functions with the business mission while offering opportunities to lower costs.

Correct AnswerverifiedShow Answer

In which phase of the SecSDLC does the risk management task occur?

Correct AnswerverifiedShow Answer

Which model of SecSDLC does the work product from each phase fall into the next phase to serve as its starting point?

Correct AnswerverifiedShow Answer

According to the Corporate Governance Task Force (CGTF) ,during which phase in the IDEAL model and framework does the organization plan the specifics of how it will reach its destination?

Correct AnswerverifiedShow Answer

Which of the following set the direction and scope of the security process and provide detailed instruction for its conduct?

Correct AnswerverifiedShow Answer

Which of the following is an information security governance responsibility of the Chief Security Officer?

Correct AnswerverifiedShow Answer

Which type of planning is used to organize the ongoing,day-to-day performance of tasks?

Correct AnswerverifiedShow Answer

The primary goal of external monitoring is to maintain an informed awareness of the state of all of the organization's networks,information systems,and information security defenses.

Correct AnswerverifiedShow Answer

A project manager who understands project management,personnel management,and InfoSec technical requirements is needed to fill the role of a(n) ____________.

Correct AnswerverifiedShow Answer

Penetration testing is often conducted by penetration testers-consultants or outsourced contractors who might be referred to as red teams.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified