QUESTION: 153 Exam Topic: 2, Information Security Controls and Audit Management

An employee successfully avoids becoming a victim of a sophisticated spear phishing attack due to knowledge gained through the corporate information security awareness program.
What type of control has been effectively utilized?

Management Control
Technical Control
Training Control
Operational Control

Answer(s): D

Reveal Solution Next Question

QUESTION: 154 Exam Topic: 2, Information Security Controls and Audit Management

Which of the following illustrates an operational control process:

Classifying an information system as part of a risk assessment
Installing an appropriate fire suppression system in the data center
Conducting an audit of the configuration management process
Establishing procurement standards for cloud vendors

Answer(s): B

Reveal Solution Next Question

QUESTION: 155 Exam Topic: 2, Information Security Controls and Audit Management

With respect to the audit management process, management response serves what function?

placing underperforming units on notice for failing to meet standards
determining whether or not resources will be allocated to remediate a finding
adding controls to ensure that proper oversight is achieved by management
revealing the "root cause" of the process failure and mitigating for all internal and external units

Answer(s): B

Reveal Solution Next Question