CISM Exam Dumps | Which of the following are seldom changed in response to technological changes?

<< Prev Question Next Question >>

Question 390/453

Which of the following are seldom changed in response to technological changes?

A. Standards

B. Procedures

C. Policies

D. Guidelines

Question List (453q): Question 1: A major trading partner with access to the internal network ...; Question 2: Which of the following would BEST mitigate identified vulner...; Question 3: Which two components PRIMARILY must be assessed in an effect...; Question 4: Risk assessment should be built into which of the following ...; Question 5: What task should be performed once a security incident has b...; Question 6: Which of the following steps should be performed FIRST in th...; Question 7: To mitigate a situation where one of the programmers of an a...; Question 8: In a well-controlled environment, which of the following act...; Question 9: To justify its ongoing security budget, which of the followi...; Question 10: Which of the following threats is prevented by using token-b...; Question 11: The business advantage of implementing authentication tokens...; Question 12: Which of the following would BEST help to identify vulnerabi...; Question 13: Which of the following situations would be the MOST concern ...; Question 14: Previously accepted risk should be:...; Question 15: Which of the following is the PRIMARY prerequisite to implem...; Question 16: Which of the following is the MOST important information to ...; Question 17: Which of the following metrics would provide management with...; Question 18: A large organization is considering a policy that would allo...; Question 19: Which of the following would be the MOST important goal of a...; Question 20: When speaking to an organization's human resources departmen...; Question 21: The MOST important objective of a post incident review is to...; Question 22: The authorization to transfer the handling of an internal se...; Question 23: Prior to having a third party perform an attack and penetrat...; Question 24: Which is the BEST way to measure and prioritize aggregate ri...; Question 25: In an organization, information systems security is the resp...; Question 26: Which of the following devices should be placed within a DMZ...; Question 27: The MOST appropriate individual to determine the level of in...; Question 28: Which of the following is MOST important to consider when de...; Question 29: In order to protect a network against unauthorized external ...; Question 30: Data owners are PRIMARILY responsible for establishing risk ...; Question 31: Which of the following BEST illustrates residual risk within...; Question 32: When performing a risk assessment, the MOST important consid...; Question 33: Which of the following would be MOST critical to the success...; Question 34: An internal review of a web-based application system finds t...; Question 35: A core business unit relies on an effective legacy system th...; Question 36: The decision as to whether a risk has been reduced to an acc...; Question 37: Which of the following is the MOST important action to take ...; Question 38: When performing a quantitative risk analysis, which of the f...; Question 39: The BEST way to establish a recovery time objective (RTO) th...; Question 40: An organization shares customer information across its globa...; Question 41: Which of the following is the BEST approach for an organizat...; Question 42: Information security policies should:...; Question 43: The purpose of a corrective control is to:...; Question 44: Which of the following is the MOST appropriate individual to...; Question 45: Which of the following would be the MOST important factor to...; Question 46: It is important to classify and determine relative sensitivi...; Question 47: Which of the following security mechanisms is MOST effective...; Question 48: What is the MOST important item to be included in an informa...; Question 49: When creating a forensic image of a hard drive, which of the...; Question 50: An information security manager has completed a risk assessm...; Question 51: An information security manager learns that a departmental s...; Question 52: When developing security standards, which of the following w...; Question 53: Which of the following is the MOST appropriate method to pro...; Question 54: Which of the following will BEST prevent an employee from us...; Question 55: Logging is an example of which type of defense against syste...; Question 56: Emergency actions are taken at the early stage of a disaster...; Question 57: A serious vulnerability is reported in the firewall software...; Question 58: When a departmental system continues to be out of compliance...; Question 59: Which of the following is the MOST effective way to treat a ...; Question 60: Which of the following is MOST effective in preventing the i...; Question 61: Which of the following is a benefit of information security ...; Question 62: Which of the following is the MAIN reason for performing ris...; Question 63: What is the MOST important reason for conducting security aw...; Question 64: Successful social engineering attacks can BEST be prevented ...; Question 65: Which of the following roles would represent a conflict of i...; Question 66: Which of the following BEST describes an information securit...; Question 67: An organization has to comply with recently published indust...; Question 68: Which of the following is MOST important for a successful in...; Question 69: Who can BEST approve plans to implement an information secur...; Question 70: Which would be one of the BEST metrics an information securi...; Question 71: Which of the following is an example of a corrective control...; Question 72: Utilizing external resources for highly technical informatio...; Question 73: An information security manager at a global organization has...; Question 74: When residual risk is minimized:...; Question 75: Which of the following is the MOST relevant metric to includ...; Question 76: The implementation of continuous monitoring controls is the ...; Question 77: Which of the following is the MOST important consideration w...; Question 78: Information security policy enforcement is the responsibilit...; Question 79: When performing a business impact analysis (BIA), which of t...; Question 80: Which of the following actions should be taken when an infor...; Question 81: Developing a successful business case for the acquisition of...; Question 82: Which of the following requirements would have the lowest le...; Question 83: What is the BEST way to ensure that contract programmers com...; Question 84: It is MOST important for an information security manager to ...; Question 85: A desktop computer that was involved in a computer security ...; Question 86: An effective way of protecting applications against Structur...; Question 87: Who should be responsible for enforcing access rights to app...; Question 88: When an emergency security patch is received via electronic ...; Question 89: Which of the following is MOST essential for a risk manageme...; Question 90: Which of the following would be the MOST effective counterme...; Question 91: The MAIN reason for continuous monitoring of a security stra...; Question 92: Recovery point objectives (RPOs) can be used to determine wh...; Question 93: Information security managers should use risk assessment tec...; Question 94: A web server in a financial institution that has been compro...; Question 95: What is the MOST important success factor in launching a cor...; Question 96: Which of the following is the MOST appropriate use of gap an...; Question 97: A new regulation has been announced that requires mandatory ...; Question 98: When developing a tabletop test plan for incident response t...; Question 99: An information security manager reviewing firewall rules wil...; Question 100: An organization that has outsourced its incident management ...; Question 101: A multinational organization wants to monitor outbound traff...; Question 102: Which of the following devices could potentially stop a Stru...; Question 103: Which of the following is the BEST mechanism to determine th...; Question 104: In business-critical applications, user access should be app...; Question 105: An organization is considering whether to allow employees to...; Question 106: Which of the following is MOST important when deciding wheth...; Question 107: A third party was engaged to develop a business application....; Question 108: Which of the following is the MOST important objective of te...; Question 109: An emergency change was made to an IT system as a result of ...; Question 110: What will have the HIGHEST impact on standard information se...; Question 111: Data owners are normally responsible for which of the follow...; Question 112: Based on the information provided, which of the following si...; Question 113: Which of the following is the MOST important reason for perf...; Question 114: To help ensure that contract personnel do not obtain unautho...; Question 115: The MOST useful way to describe the objectives in the inform...; Question 116: When considering whether to adopt a new information security...; Question 117: To BEST improve the alignment of the information security ob...; Question 118: In addition to backup data, which of the following is the MO...; Question 119: Which of the following is the MOST important driver when dev...; Question 120: Which of the following will BEST help to proactively prevent...; Question 121: Which of the following is the MOST important to ensure a suc...; Question 122: The PRIMARY concern of an information security manager docum...; Question 123: The PRIMARY reason for using metrics to evaluate information...; Question 124: The contribution of recovery point objective (RPO) to disast...; Question 125: Which of the following is the PRIMARY reason to conduct peri...; Question 126: Acceptable risk is achieved when:...; Question 127: The MOST important factor in ensuring the success of an info...; Question 128: A contract bid is digitally signed and electronically mailed...; Question 129: The IT function has declared that, when putting a new applic...; Question 130: Security monitoring mechanisms should PRIMARILY:...; Question 131: The data access requirements for an application should be de...; Question 132: Which of the following should be determined FIRST when estab...; Question 133: What is the MAIN drawback of e-mailing password-protected zi...; Question 134: Before conducting a formal risk assessment of an organizatio...; Question 135: Which of the following is the BEST approach to reduce unnece...; Question 136: At what stage of the applications development process should...; Question 137: When developing incident response procedures involving serve...; Question 138: An organization has implemented an enhanced password policy ...; Question 139: Information security should be:...; Question 140: Which of the following roles is PRIMARILY responsible for de...; Question 141: A critical component of a continuous improvement program for...; Question 142: Retention of business records should PRIMARILY be based on:...; Question 143: The FIRST step in establishing a security governance program...; Question 144: Which of the following environments represents the GREATEST ...; Question 145: An information security program should focus on:...; Question 146: Which of the following BEST ensures that modifications made ...; Question 147: Which of the following would generally have the GREATEST neg...; Question 148: Which of the following guarantees that data in a file have n...; Question 149: When identifying legal and regulatory issues affecting infor...; Question 150: Which of the following BEST ensures that security risks will...; Question 151: Which of the following devices should be placed within a DMZ...; Question 152: The BEST time to perform a penetration test is after:...; Question 153: The PRIMARY purpose of performing an internal attack and pen...; Question 154: A business partner of a factory has remote read-only access ...; Question 155: In order to highlight to management, the importance of netwo...; Question 156: The advantage of sending messages using steganographic techn...; Question 157: Which of the following reduces the potential impact of socia...; Question 158: The business continuity policy should contain which of the f...; Question 159: Which of the following is the MOST effective way to communic...; Question 160: Which of the following documents would be the BEST reference...; Question 161: Which of the following is the MOST important to keep in mind...; Question 162: Which of the following will protect the confidentiality of d...; Question 163: Which of the following is the BEST approach to make strategi...; Question 164: The PRIMARY purpose of using risk analysis within a security...; Question 165: What is the BEST way to ensure that an intruder who successf...; Question 166: What is the MOST cost-effective method of identifying new ve...; Question 167: An intranet server should generally be placed on the:...; Question 168: The MAIN reason for having the Information Security Steering...; Question 169: Which of the following BEST indicates a successful risk mana...; Question 170: In a social engineering scenario, which of the following wil...; Question 171: An account with full administrative privileges over a produc...; Question 172: The MOST important success factor to design an effective IT ...; Question 173: An operating system (OS) noncritical patch to enhance system...; Question 174: The PRIMARY purpose of involving third-party teams for carry...; Question 175: An information security manager has been asked to create a s...; Question 176: A customer credit card database has been breached by hackers...; Question 177: Which of the following is the PRIMARY reason for implementin...; Question 178: An organization's board of directors has learned of recent l...; Question 179: Business units within an organization are resistant to propo...; Question 180: A risk assessment study carried out by an organization noted...; Question 181: Which of the following is the BEST metric for evaluating the...; Question 182: A new port needs to be opened in a perimeter firewall. Which...; Question 183: Following a significant change to the underlying code of an ...; Question 184: The configuration management plan should PRIMARILY be based ...; Question 185: Which of the following is the MOST appropriate board-level a...; Question 186: Data owners must provide a safe and secure environment to en...; Question 187: When performing an information risk analysis, an information...; Question 188: Which of the following results from the risk assessment proc...; Question 189: The PRIMARY advantage of single sign-on (SSO) is that it wil...; Question 190: Which of the following is the PRIMARY benefit of implementin...; Question 191: Who is ultimately responsible for ensuring that information ...; Question 192: Which of the following techniques MOST clearly indicates whe...; Question 193: When security policies are strictly enforced, the initial im...; Question 194: What is the BEST defense against a Structured Query Language...; Question 195: Phishing is BEST mitigated by which of the following?...; Question 196: Which of the following groups would be in the BEST position ...; Question 197: The MOST effective approach to address issues that arise bet...; Question 198: What is the MAIN risk when there is no user management repre...; Question 199: Segregation of duties is a security control PRIMARILY used t...; Question 200: The MOST important factor in planning for the long-term rete...; Question 201: What is the PRIMARY objective of a post-event review in inci...; Question 202: Before engaging outsourced providers, an information securit...; Question 203: In assessing the degree to which an organization may be affe...; Question 204: Requiring all employees and contractors to meet personnel se...; Question 205: The MOST complete business case for security solutions is on...; Question 206: The BEST way to determine if an anomaly-based intrusion dete...; Question 207: Which of the following mechanisms is the MOST secure way to ...; Question 208: Isolation and containment measures for a compromised compute...; Question 209: From an information security manager perspective, what is th...; Question 210: Which of the following analyses will BEST identify the exter...; Question 211: Which of the following activities is MOST likely to increase...; Question 212: Security technologies should be selected PRIMARILY on the ba...; Question 213: Which of the following messages would be MOST effective in o...; Question 214: During the initiation phase of the system development life c...; Question 215: Which of the following is the MOST likely to change an organ...; Question 216: When outsourcing data to a cloud service provider, which of ...; Question 217: The PRIMARY reason for assigning classes of sensitivity and ...; Question 218: Information security projects should be prioritized on the b...; Question 219: An organization plans to allow employees to use their own de...; Question 220: Which of the following should be in place before a black box...; Question 221: The MOST important component of a privacy policy is:...; Question 222: Which of the following are likely to be updated MOST frequen...; Question 223: Identification and prioritization of business risk enables p...; Question 224: A root kit was used to capture detailed accounts receivable ...; Question 225: When performing a qualitative risk analysis, which of the fo...; Question 226: Which of the following approaches is BEST for selecting cont...; Question 227: Which of the following is the MOST important information to ...; Question 228: Which of the following would BEST assist an IS manager in ga...; Question 229: Which of the following BEST ensures that information transmi...; Question 230: Which of the following would be MOST useful in a report to s...; Question 231: A risk assessment should be conducted:...; Question 232: How would an organization know if its new information securi...; Question 233: All risk management activities are PRIMARILY designed to red...; Question 234: The BEST reason for an organization to have two discrete fir...; Question 235: An online banking institution is concerned that the breach o...; Question 236: Which of the following presents the GREATEST threat to the s...; Question 237: Secure customer use of an e-commerce application can BEST be...; Question 238: Which of the following attacks is BEST mitigated by utilizin...; Question 239: When personal information is transmitted across networks, th...; Question 240: The MOST important reason for conducting periodic risk asses...; Question 241: Which of the following would BEST protect an organization's ...; Question 242: What is the MOST important element to include when developin...; Question 243: Which of the following is the MOST important step in risk ra...; Question 244: When messages are encrypted and digitally signed to protect ...; Question 245: What is the FIRST action an information security manager sho...; Question 246: The PRIORITY action to be taken when a server is infected wi...; Question 247: Which of the following is the MOST important process that an...; Question 248: Security awareness training is MOST likely to lead to which ...; Question 249: A risk management approach to information protection is:...; Question 250: To justify the need to invest in a forensic analysis tool, a...; Question 251: A risk assessment and business impact analysis (BIA) have be...; Question 252: Investments in information security technologies should be b...; Question 253: The "separation of duties" principle is violated if which of...; Question 254: In an organization that has undergone an expansion through a...; Question 255: Which of the following is the MAIN objective in contracting ...; Question 256: When developing an information security program, what is the...; Question 257: Of the following, the BEST method for ensuring that temporar...; Question 258: When an organization is setting up a relationship with a thi...; Question 259: If an organization considers taking legal action on a securi...; Question 260: As an organization grows, exceptions to information security...; Question 261: Which of the following would be of GREATEST importance to th...; Question 262: When selecting risk response options to manage risk, an info...; Question 263: Which of the following is the BEST method to provide a new u...; Question 264: Which of the following is the MOST important consideration w...; Question 265: Which of the following would be MOST helpful to achieve alig...; Question 266: Which of the following is an advantage of a centralized info...; Question 267: Which of the following represents the MAJOR focus of privacy...; Question 268: Which of the following are the essential ingredients of a bu...; Question 269: Which of the following would be MOST relevant to include in ...; Question 270: Which of the following BEST enables the deployment of consis...; Question 271: Which of the following is MOST important for measuring the e...; Question 272: Which of the following BEST contributes to the development o...; Question 273: The PRIMARY goal of a corporate risk management program is t...; Question 274: Which of the following will BEST protect against malicious a...; Question 275: An organization keeps backup tapes of its servers at a warm ...; Question 276: Following a recent acquisition, an information security mana...; Question 277: Which of the following would be the BEST metric for the IT r...; Question 278: Which of the following is the MOST essential task for a chie...; Question 279: Which of the following should be determined while defining r...; Question 280: When a significant security breach occurs, what should be re...; Question 281: When a user employs a client-side digital certificate to aut...; Question 282: Which of the following is the MOST critical activity to ensu...; Question 283: Which of the following is generally used to ensure that info...; Question 284: A newly hired information security manager reviewing an exis...; Question 285: What of the following is MOST important to include in an inf...; Question 286: Investment in security technology and processes should be ba...; Question 287: Which of the following is the MOST important element of an i...; Question 288: The MOST appropriate owner of customer data stored in a cent...; Question 289: Evidence from a compromised server has to be acquired for a ...; Question 290: Risk management programs are designed to reduce risk to:...; Question 291: An information security manager uses security metrics to mea...; Question 292: When developing an information security governance framework...; Question 293: Which of the following is the BEST way to determine if an in...; Question 294: What is the MOST important factor in the successful implemen...; Question 295: Reviewing which of the following would BEST ensure that secu...; Question 296: Who should determine the appropriate classification of accou...; Question 297: Which of the following is responsible for legal and regulato...; Question 298: Which of the following would be the BEST defense against sni...; Question 299: Which of the following is the PRIMARY advantage of having an...; Question 300: An organization is considering moving one of its critical bu...; Question 301: It is MOST important that information security architecture ...; Question 302: An information security manager reviewed the access control ...; Question 303: An organization has adopted a practice of regular staff rota...; Question 304: Which of the following is the MOST significant security risk...; Question 305: When properly tested, which of the following would MOST effe...; Question 306: Effective IT governance is BEST ensured by:...; Question 307: An information security manager that is utilizing a public c...; Question 308: For virtual private network (VPN) access to the corporate ne...; Question 309: During which phase of an incident response process should co...; Question 310: Which if the following would be the MOST important informati...; Question 311: Security audit reviews should PRIMARILY:...; Question 312: Which of the following is MOST effective in preventing secur...; Question 313: Which of the following are the MOST important individuals to...; Question 314: A multinational organization's information security manager ...; Question 315: Attacks using multiple methods to spread should be classifie...; Question 316: To achieve effective strategic alignment of security initiat...; Question 317: The service level agreement (SLA) for an outsourced IT funct...; Question 318: When a new key business application goes into production, th...; Question 319: What would a security manager PRIMARILY utilize when proposi...; Question 320: The MOST basic requirement for an information security gover...; Question 321: Documented standards/procedures for the use of cryptography ...; Question 322: An intrusion detection system should be placed:...; Question 323: Which of the following would be MOST appropriate for collect...; Question 324: A business unit intends to deploy a new technology in a mann...; Question 325: Which of the following risks is represented in the risk appe...; Question 326: A new system has been developed that does not comply with pa...; Question 327: In business critical applications, where shared access to el...; Question 328: Which of the following is the GREATEST security threat when ...; Question 329: Senior management commitment and support for information sec...; Question 330: Which of the following is the BEST method or technique to en...; Question 331: Who is ultimately responsible for the organization's informa...; Question 332: On which of the following should a firewall be placed?...; Question 333: The PRIMARY benefit of performing an information asset class...; Question 334: Which of the following would BEST ensure that security risk ...; Question 335: The BEST strategy for risk management is to:...; Question 336: The recovery time objective (RTO) is reached at which of the...; Question 337: Which of the following authentication methods prevents authe...; Question 338: For risk management purposes, the value of an asset should b...; Question 339: When the inherent risk of a business activity is lower than ...; Question 340: Several business units reported problems with their systems ...; Question 341: An information security organization should PRIMARILY:...; Question 342: In which of the following system development life cycle (SDL...; Question 343: The PRIMARY objective of performing a post-incident review i...; Question 344: The PRIMARY objective of an Internet usage policy is to prev...; Question 345: Which of the following is MOST important in determining whet...; Question 346: Which of the following is the MOST effective method of preve...; Question 347: A message* that has been encrypted by the sender's private k...; Question 348: Which of the following should be the FIRST step in developin...; Question 349: An organization has decided to implement additional security...; Question 350: An organization plans to outsource its customer relationship...; Question 351: Which of the following would represent a violation of the ch...; Question 352: Which of the following ensures that newly identified securit...; Question 353: When application-level security controlled by business proce...; Question 354: When a security standard conflicts with a business objective...; Question 355: An information security manager has developed a strategy to ...; Question 356: Which of the following actions should lake place immediately...; Question 357: At what stage of the applications development process would ...; Question 358: A good privacy statement should include:...; Question 359: Which of the following is MOST difficult to achieve in a pub...; Question 360: Senior management has approved employees working off-site by...; Question 361: The value of information assets is BEST determined by:...; Question 362: What is the MOST effective access control method to prevent ...; Question 363: Successful implementation of information security governance...; Question 364: An organization is already certified to an international sec...; Question 365: Which of the following would help to change an organization'...; Question 366: The FIRST step to create an internal culture that focuses on...; Question 367: Which of the following would BEST address the risk of data l...; 1 commentQuestion 368: During the restoration of several servers, a critical proces...; Question 369: The chief information security officer (CISO) should ideally...; Question 370: Which of the following is the MOST appropriate position to s...; Question 371: A database was compromised by guessing the password for a sh...; Question 372: When an organization is implementing an information security...; Question 373: The FIRST step in an incident response plan is to:...; Question 374: What does a network vulnerability assessment intend to ident...; Question 375: The BEST method for detecting and monitoring a hacker's acti...; Question 376: The main mail server of a financial institution has been com...; Question 377: What is the BEST way to ensure data protection upon terminat...; Question 378: Which of the following is the MOST effective at preventing a...; Question 379: Which of the following situations must be corrected FIRST to...; Question 380: Of the following, which is the MOST important aspect of fore...; Question 381: Who is responsible for ensuring that information is categori...; Question 382: Which of the following is MOST likely to reduce the effectiv...; Question 383: Without prior approval, a training department enrolled the c...; Question 384: Which of the following metrics would be the MOST useful in m...; Question 385: An information security manager is reviewing the impact of a...; Question 386: The PRIMARY focus of the change control process is to ensure...; Question 387: Most security vulnerabilities in software exit because:...; Question 388: Which of the following would be the BEST option to improve a...; Question 389: An organization plans to contract with an outside service pr...; Question 390: Which of the following are seldom changed in response to tec...; Question 391: Which of the following characteristics is MOST important whe...; Question 392: Security governance is MOST associated with which of the fol...; Question 393: The decision on whether new risks should fall under periodic...; Question 394: Which of the following tools is MOST appropriate to assess w...; Question 395: Detailed business continuity plans should be based PRIMARILY...; Question 396: What is the GREATEST advantage of documented guidelines and ...; Question 397: The valuation of IT assets should be performed by:...; Question 398: The effectiveness of an information security governance fram...; Question 399: Which of the following measures would be MOST effective agai...; Question 400: Which of the following is the MOST effective, positive metho...; Question 401: Which of the following would help management determine the r...; Question 402: Which of the following will BEST protect confidential data w...; Question 403: During which phase of development is it MOST appropriate to ...; Question 404: A business unit uses an e-commerce application with a strong...; Question 405: A risk profile support effective security decisions PRIMARIL...; Question 406: Which of the following disaster recovery testing techniques ...; Question 407: Which of the following is the BEST approach for improving in...; Question 408: The cost of implementing a security control should not excee...; Question 409: When implementing security controls, an information security...; Question 410: A computer incident response team (CIRT) manual should PRIMA...; Question 411: In addition to business alignment and security ownership, wh...; Question 412: Which of the following BEST ensures timely and reliable acce...; Question 413: Which of the following is done PRIMARILY to address the inte...; Question 414: Which of the following techniques would be the BEST test of ...; Question 415: The PRIMARY reason for initiating a policy exception process...; Question 416: A payroll application system accepts individual user sign-on...; Question 417: The PRIMARY driver to obtain external resources to execute t...; Question 418: To determine how a security breach occurred on the corporate...; Question 419: Who should drive the risk analysis for an organization?...; Question 420: When implementing effective security governance within the r...; Question 421: An information security manager has been asked to develop a ...; Question 422: How would an information security manager balance the potent...; Question 423: Which of the following BEST provides message integrity, send...; Question 424: Why is "slack space" of value to an information security man...; Question 425: When designing an information security quarterly report to m...; Question 426: Temporarily deactivating some monitoring processes, even if ...; Question 427: To implement a security framework, an information security m...; Question 428: Which of the following activities performed by a database ad...; Question 429: Which of the following BEST describes the scope of risk anal...; Question 430: Which of the following is the MOST effective solution for pr...; Question 431: An organization is entering into an agreement with a new bus...; Question 432: An information security manager is implementing a bring your...; 1 commentQuestion 433: Which of the following is the MOST appropriate course of act...; Question 434: Which of the following would raise security awareness among ...; Question 435: When contracting with an outsourcer to provide security admi...; Question 436: In assessing risk, it is MOST essential to:...; Question 437: When a large organization discovers that it is the subject o...; Question 438: Which of the following is the MOST important item to conside...; Question 439: The root cause of a successful cross site request forgery (X...; Question 440: The implementation of a capacity plan would prevent:...; Question 441: Good information security standards should:...; Question 442: Which of the following is MOST important to the successful p...; Question 443: In the course of examining a computer system for forensic ev...; Question 444: Which of the following is the MOST appropriate method for de...; Question 445: Which of the following is MOST effective in preventing weakn...; Question 446: Which of the following is the BEST tool to maintain the curr...; Question 447: An organization without any formal information security prog...; Question 448: In a large organization, defining recovery time objectives (...; Question 449: Which of the following risks would BEST be assessed using qu...; Question 450: Simple Network Management Protocol v2 (SNMP v2) is used freq...; Question 451: Which of the following measures is the MOST effective deterr...; Question 452: What is the BEST policy for securing data on mobile universa...; Question 453: A risk management program would be expected to:...