Which ISO publication lays out guidelines for selecting and implementing security controls?

• 27701

• 27001

• 27002

• 31000

Which type of control makes use of policies, DPRs, and BCPs?

• Technical

• Managerial

• Operational

• Preventative

Encryption is which type of access control?

• Administrative

• Physical

• Technical

• Restrictive

Which of the following are control categories? (Select three.)

• Operational

• Technical

• Managerial

• Preventative

• Compensating

Which of the following is an example of a preventative control type?

• Network monitoring applications

• An advanced network appliance

• Real-time monitoring alerts

• Intrusion detection systems

Which type of control is used to discourage malicious actors from attempting to breach a network?

• Physical

• Deterrent

• Detective

• Preventative

Which SOC type reports focus on predetermined controls that are audited and a detailed report that attests to a company's compliance?

• III

• IV

• I

• II

Your organization allows employees to bring their own devices into work, but management is concerned that a malicious internal user could use a mobile device to conduct an insider attack.

Which of the following should be implemented to help mitigate this threat?

• Implement an AUP that specifies where and when mobile devices can be possessed within the organization.

• Implement an AUP that specifies which apps are allowed for use with organizational data.

• Implement a guest wireless network that is isolated from your organization's production network.

• Implement a Network Access Control (NAC) solution.

When training your employees on how to identify various attacks, which of the following policies should you be sure to have and enforce? (Select two.)

• Encryption policies

• Group policies

• Clean desk policies

• Password policies

• Usage policies

Your company is preparing to enter into a partner relationship with another organization. It will be necessary for the information systems used by each organization to connect and integrate with each other. Which of the following is of primary importance as you take steps to enter into this partner relationship?

• Identify how data ownership is to be determined

• Ensure that the integration process maintains the security of each organization's network

• Ensure that both organizations have similar incident-response procedures

• Ensure that all aspects of the relationship are agreed upon in writing