In a company the IT strategy is migrating towards a Service Oriented Architecture (SOA) so that migrating to the cloud is better feasible in the future. The security architect is asked to make a first draft of the security architecture.…
A company’s webshop offers prospects and customers the possibility to search the catalog and place orders around the clock. In order to satisfy the needs of both customer and business several requirements have to be met One of the criteria…
What is the main reason to use a firewall to separate two parts of your internal network? A. To control traffic intensity between two network segments B. To decrease network loads C. To enable the installation of an Intrusion Detection…
It is important that an organization is able to prove compliance with information standards and legislation. One of the most important areas is documentation concerning access management This process contains a number of activities including granting rights, monitoring identity status,…
A risk manager is asked to perform a complete risk assessment for a company. What is the best method to identify most of the threats to the company? A. Have a brainstorm with representatives of all stakeholders B. Interview top…
A security architect argues with the internal fire prevention team about the statement in the information security policy, that doors to confidential areas should be locked at all times. The emergency response team wants to access to those areas in…
When should information security controls be considered? A. After the risk assessment B. As part of the scoping meeting C. At the kick-off meeting D. During the risk assessment work
A security manager just finished the final copy of a risk assessment. This assessment contains a list of identified risks and she has to determine how to treat these risks. What is the best option for the treatment of risks?…
Which security item is designed to take collections of data from multiple computers? A. Firewall B. Host-Based Intrusion Detection and Prevention System (Host-Based IDPS) C. Network-Based Intrusion Detection and Prevention System (Network-Based IDPS) D. Virtual Private Network (VPN)
Zoning is a security control to separate physical areas with different security levels. Zones with higher security levels can be secured by more controls. The facility manager of a conference center is responsible for security. What combination of business functions…