The MOST appropriate individual to determine the level of information security needed for a
specific business application is the:

Which of the following will MOST likely reduce the chances of an unauthorized individual gaining
access to computing resources by pretending to be an authorized individual needing to have his,
her password reset?

Which of the following is the MOST likely to change an organization’s culture to one that is more
security conscious?

The BEST way to ensure that an external service provider complies with organizational security

policies is to:

When an emergency security patch is received via electronic mail, the patch should FIRST be:

In a well-controlled environment, which of the following activities is MOST likely to lead to the
introduction of weaknesses in security software?

Which of the following is the BEST indicator that security awareness training has been effective?

Which of the following metrics would be the MOST useful in measuring how well information
security is monitoring violation logs?

Which of the following change management activities would be a clear indicator that normal
operational procedures require examination? A high percentage of:

Which of the following is the MOST important management signoff for migrating an order
processing system from a test environment to a production environment?