An information security manager is advised by contacts in law enforcement that there is evidence
that his/ her company is being targeted by a skilled gang of hackers known to use a variety of
techniques, including social engineering and network penetration. The FIRST step that the
security manager should take is to:

Which of the following steps should be performed FIRST in the risk assessment process?

Which of the following authentication methods prevents authentication replay?

An organization has a process in place that involves the use of a vendor. A risk assessment was
completed during the development of the process. A year after the implementation a monetary
decision has been made to use a different vendor. What, if anything, should occur?

Who can BEST advocate the development of and ensure the success of an information security
program?

Which of the following BEST ensures that information transmitted over the Internet will remain
confidential?

The effectiveness of virus detection software is MOST dependent on which of the following?

Which of the following is the MOST effective type of access control?

Which of the following devices should be placed within a DMZ?

An intrusion detection system should be placed: