Exam 2: Certified Network Defender

Which of the following functions MUST your Information Security Governance program include for formal organizational reporting?

When working in the Payment Card Industry (PCI), how often should security logs be review to comply with the standards?

An organization is required to implement background checks on all employees with access to databases containing credit card information. This is considered a security___________.

You are just hired as the new CISO and are being briefed on all the Information Security projects that your section has on going. You discover that most projects are behind schedule and over budget. Using the best business practices for project management you determine that the project correct aligns with the company goals. What needs to be verified FIRST?

Scenario: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified. The CISO has validated audit findings, determined if compensating controls exist, and started initial remediation planning. Which of the following is the MOST logical next step?

A stakeholder is a person or group:

Which of the following is MOST important when tuning an Intrusion Detection System (IDS)?

You have implemented a new security control. Which of the following risk strategy options have you engaged in?

Which of the following most commonly falls within the scope of an information security governance steering committee?

An organization has a number of Local Area Networks (LANs) linked to form a single Wide Area Network (WAN). Which of the following would BEST ensure network continuity?

An organization has defined a set of standard security controls. This organization has also defined the circumstances and conditions in which they must be applied. What is the NEXT logical step in applying the controls in the organization?

Which of the following methods are used to define contractual obligations that force a vendor to meet customer expectations?

The CIO of an organization has decided to assign the responsibility of internal IT audit to the IT team. This is considering a bad practice MAINLY because_______________.

Kimberly is studying to be an IT security analyst at a vocational school in her town. The school offers many different programming as well as networking languages. What networking protocol language should she learn that routers utilize?

Which of the following is used to lure attackers into false environments so they can be monitored, contained, or blocked from reaching critical systems?

With the standard Linux second extended file system (Ext2fs), a file is deleted when the inode internal link count reaches ________.

To have accurate and effective information security policies how often should the CISO review the organization policies?

Scenario: You are the CISO and have just completed your first risk assessment for your organization. You find many risks with no security controls, and some risks with inadequate controls. You assign work to your staff to create or adjust existing security controls to ensure they are adequate for risk mitigation needs. When adjusting the controls to mitigate the risks, how often should the CISO perform an audit to verify the controls?

The company decides to release the application without remediating the high-risk vulnerabilities. Which of the following is the MOST likely reason for the company to release the application?

Sectors in hard disks typically contain how many bytes?