Cybersecurity Management Final Comprehensive Exam Study Guide With Complete Solutions

CYBERSECURITY MANAGEMENT FINAL
COMPREHENSIVE EXAM STUDY GUIDE
WITH COMPLETE SOLUTIONS

●● The key purpose of Digital Forensics
Answer: To perform root cause analysis


●● Two alternative approaches for Digital Forensics
Answer: Protect and forget


●● Two alternative approaches for Digital Forensics
Answer: Apprehend and prosecute


●● The digital forensics teams utilizes
Answer: Affidavits and Search Warrants to carry out its mission


●● Payment Card Industry Data Security Standard
Answer: A set of security standards that all U.S. companies processing,
storing, or transmitting credit card information must follow.


●● Enterprise Information Security Policy EISP

, Answer: is high level information security policy that sets the strategic
direction, scope, and tone for all of an organization's security efforts


●● The Enterprise Information Security Policy
Answer: guides the development, implementation, and management
requirements of the InfoSec program,


●● Issue-Specific Security Policy
Answer: an organizational policy that provides detailed, targeted
guidance to instruct all members of the organization in the use of a
resource


●● System Specific Security Policy
Answer: are organizational policies that often function as standards or
procedures to be used when configuring or maintaining systems


●● For policies to be effective, and legally defensible, they must be
properly:
Answer: Developed using industry-accepted practices, and formally
approved by management


●● For policies to be effective, and legally defensible, they must be
properly:
Answer: Distributed using all appropriate methods