Anny recently implemented an intrusion prevention system designed to block common network attacks from affecting his organization. What type of risk management strategy is Anny pursuing?

• Risk Acceptance

• Risk Avoidance

• Risk Mitigation

• Risk Transference

Which of the following principles expects an individual to behave reasonably under any given circumstance?

• Due Diligence

• Separation of Duties

• Due Care

• Least Privilege

What type of malware is characterized by spreading from system to system under its own power by exploiting vulnerabilities that do not require user intervention?

• Trojan Horse

• Virus

• Logic Bomb

• Worm

Which one of the following security programs is designed to establish a minimum standard common denominator of security understanding?

• Training

• Education

• Indoctrination

• Awareness

Which one of the following is an example of physical infrastructure hardening?

• Antivirus Software

• Hardware-based Network Firewall

• Two Factor-Authentication

• Fire Suppression System

Which information security goal is impacted when an organization experiences a DoS or DDoS attack?

• Confidentiality

• Integrity

• Availability

• Denial

What is the best way to provide accountability for the use of identities?

• Logging

• Authorization

• Digital Signatures

• Type 1 Authentication

Management support is critical to the success of a business continuity plan. Which of the following should be provided to the management to obtain their support?

• Business Case

• Business Impact Analysis

• Risk Analysis

• Threat Report

Which of the following is a critical first step in disaster recovery and contingency planning?

• Plan Testing and Drills

• Complete a Business Impact Analysis

• Determine Offsite Backup Facility Alternatives

• Organize and Create Relevant Documentation

What type of encryption is typically used for data at rest?

• Asymmetric Encryption

• Symmetric Encryption

• DES

• OTP