Q88. After obtaining commitment from senior management, which of the following should be completed NEXT when establishing an information security program?

Q89. It is MOST important tot an information security manager to ensure that security risk assessments are performed:

Q90. Which of the following would BEST help an information security manager prioritize remediation activities to meet regulatory requirements?

Q91. Which of the following is the BEST course of action for an information security manager to align security and business goals?

Q92. An IT department is evaluating a new cloud backup service to support the human resources (HR) department. Which of the following is the information security manager’s MOST important action prior to contract execution?

Q93. Which of the following is the FIRST phase in which security should be addressed in the development cycle of a project?

Q94. If the inherent risk of a business activity is higher than the acceptable risk level, the information security manager should FIRST

Q95. An e-commerce order fulfillment web server should generally be placed on which of the following?

Q96. A common concern with poorly written web applications is that they can allow an attacker to:

Q97. What would be the MOST significant security risks when using wireless local area network (LAN) technology?

Q98. Which of the following MOST effectively allows for disaster recovery testing without interrupting business operations?

Q99. Which of the following activities is designed to handle a control failure that leads to a breach?

Q100. Which of the following is MOST important to understand when developing a meaningful information security strategy?

Q101. When configuring a biometric access control system that protects a high-security data center, the system’s sensitivity level should be set:

Q102. Which of the following is the MOST important action to take when engaging third-party consultants to conduct an attack and penetration test?