Sample Questions Q) Credit card information, medical data, and government records are all examples of: a) Confidential/Protected Information b) Bodily Information c) Territorial Information d) Communications Information Q) The establishment of a formal risk management framework and system authorization program is essential. The LAST step of the system authorization process is: a) Contacting the Internet Service Provider for an IP scope b) Getting authority to operate the system from executive management c) Changing the default passwords d) Conducting a final scan of the live system and mitigating all high and medium level vulnerabilities Q) The single most important consideration to make when developing your security program, policies, and processes is: a) Budgeting for unforeseen data compromises b) Streamlining for efficiency c) Alignment with the business d) Establishing your authority as the Security Executive Q) An organization’s Information Security Policy is of MOST importance because a) it communicates management’s commitment to protecting information resources b) it is formally acknowledged by all employees and vendors c) it defines a process to meet compliance requirements d) it establishes a framework to protect confidential information Q) Developing effective security controls is a balance between: a) Risk Management and Operations b) Corporate Culture and Job Expectations c) Operations and Regulations d) Technology and Vendor Management

Eligiblity for Certification :