What is the MAIN goal of information security awareness and training?

A security compliance manager of a large enterprise wants to reduce the time it takes to perform network, system, and application security compliance audits while increasing quality and effectiveness of the results.
What should be implemented to BEST achieve the desired results?

From a security perspective, which of the following assumptions MUST be made about input to an application?

Unused space in a disk cluster is important in media analysis because it may contain which of the following?

Which security modes is MOST commonly used in a commercial environment because it protects the integrity of financial and accounting data?

Which of the following alarm systems is recommended to detect intrusions through windows in a high- noise, occupied environment?

What is the foundation of cryptographic functions?

Which of the following is the MOST important security goal when performing application interface testing?

Which of the following is the MOST challenging issue in apprehending cyber criminals?

What is the MAIN reason for testing a Disaster Recovery Plan (DRP)?

An organization’s security policy delegates to the data owner the ability to assign which user roles have access to a particular resource. What type of authorization mechanism is being used?

The use of private and public encryption keys is fondamental in the implementation of which of the following?

Which of the following combinations would MOST negatively affect availability?

Which of the following is the MOST appropriate action when reusing media that contains sensitive data?

Which Identity and Access Management (IAM) process can be used to maintain the principle of least privilege?

Who has the PRIMARY responsibility to ensure that security objectives are aligned with organization goals?

Which of the following management process allows ONLY those services required for users to accomplish their tasks, change default user passwords, and set servers to retrieve antivirus updates?

Which of the following is a benefit in implementing an enterprise Identity and Access Management (IAM) solution?

In the Software Development Life Cycle (SDLC), maintaining accurate hardware and software inventories is a critical part of

Which of the following is needed to securely distribute symmetric cryptographic keys?

Which of the following is a characteristic of the initialization vector when using Data Encryption Standard (DES)?

In general, servers that are facing the Internet should be placed in a demilitarized zone (DMZ). What is MAIN purpose of the DMZ?

How should an organization determine the priority of its remediation efforts after a vulnerability assessment has been conducted?

The goal of a Business Impact Analysis (BIA) is to determine which of the following?

An application developer is deciding on the amount of idle session time that the application allows before a timeout. The BEST reason for determining the session timeout requirement is

Which of the following BEST describes a chosen plaintext attack?

Which of the following information MUST be provided for user account provisioning?

A database administrator is asked by a high-ranking member of management to perform specific changes to the accounting system database. The administrator is specifically instructed to not track or evidence the change in a ticket. Which of the following is the BEST course of action?

What operations role is responsible for protecting the enterprise from corrupt or contaminated media?

What is the BEST way to encrypt web application communications?

A company was ranked as high in the following National Institute of Standards and Technology (NIST) functions: Protect, Detect, Respond and Recover. However, a low maturity grade was attributed to the Identify function. In which of the following the controls categories does this company need to improve when analyzing its processes individually?

Which of the following is the PRIMARY reason to perform regular vulnerability scanning of an organization network?

At which layer of the Open Systems Interconnect (OSI) model are the source and destination address for a datagram handled?

Which of the following is the MAIN reason for using configuration management?

Which of the following is a document that identifies each item seized in an investigation, including date and time seized, full name and signature or initials of the person who seized the item, and a detailed description of the item?

A security architect plans to reference a Mandatory Access Control (MAC) model for implementation. This indicates that which of the following properties are being prioritized?

What balance MUST be considered when web application developers determine how informative application error messages should be constructed?

Which of the following would BEST describe the role directly responsible for data within an organization?

In configuration management, what baseline configuration information MUST be maintained for each computer system?

Which one of the following activities would present a significant security risk to organizations when employing a Virtual Private Network (VPN) solution?