A large corporation which is heavily reliant on IT platforms and systems is in financial difficulty and needs to drastically reduce costs in the short term to survive. The Chief Financial Officer (CFO) has mandated that all IT and architectural functions will be outsourced and a mixture of providers will be selected. One provider will manage the desktops for five years, another provider will manage the network for ten years, another provider will be responsible for security for four years, and an offshore provider will perform day to day business processing functions for two years. At the end of each contract the incumbent may be renewed or a new provider may be selected. Which of the following are the MOST likely risk implications of the CFO's business decision?

• A. Strategic architecture will not be impacted in the short term, but will be adversely impacted in the long term through the segregation of duties between the providers. Vendor management costs will stay the same and the organization's flexibility to react to new market conditions will be improved through best of breed technology implementations. Internal knowledge of IT systems will decline over time. The implementation of security controls and security updates will not change.
• B. Strategic architecture will be adversely impacted through the segregation of duties between the providers. Vendor management costs will increase and the organization's flexibility to react to new market conditions will be reduced. Internal knowledge of IT systems will decline and decrease future platform development. The implementation of security controls and security updates will take longer as responsibility crosses multiple boundaries.
• C. Strategic architecture will improve as more time can be dedicated to strategy. System stability will improve as providers use specialists and tested processes to maintain systems. Vendor management costs will increase and the organization's flexibility to react to new market conditions will be reduced slightly. Internal knowledge of IT systems will improve as providers maintain system documentation.
  The risk position of the organization will remain unchanged.
• D. Strategic architecture will be adversely impacted through the segregation of duties between the providers. Vendor management costs will remain unchanged. The risk position of the organization will decline as specialists now maintain the environment. The implementation of security controls and security updates will improve. Internal knowledge of IT systems will improve as providers maintain system documentation.

A security administrator has noticed that an increased number of employees' workstations are becoming infected with malware. The company deploys an enterprise antivirus system as well as a web content filter, which blocks access to malicious web sites where malware files can be downloaded. Additionally, the company implements technical measures to disable external storage.
Which of the following is a technical control that the security administrator should implement next to reduce malware infection?

• A. Deploy a network access control system with a persistent agent.
• B. Implement an Acceptable Use Policy which addresses malware downloads.
• C. Block cloud-based storage software on the company network.
• D. Enforce mandatory security awareness training for all employees and contractors.

Explanation: Only visible for Actual4dump members. You can sign-up / login (it's free).

A team is established to create a secure connection between software packages in order to list employee's remaining or unused benefits on their paycheck stubs. Which of the following business roles would be MOST effective on this team?

• A. Finance Officer, Human Resources, Security Administrator
• B. Database Administrator, Facilities Manager, Physical Security Manager
• C. Network Administrator, Emergency Response Team, Human Resources
• D. Network Administrator, Database Administrator, Programmers

A multi-national company has a highly mobile workforce and minimal IT infrastructure. The company utilizes a BYOD and social media policy to integrate presence technology into global collaboration tools by individuals and teams. As a result of the dispersed employees and frequent international travel, the company is concerned about the safety of employees and their families when moving in and out of certain countries. Which of the following could the company view as a downside of using presence technology?

• A. Physical security
• B. Insider threat
• C. Industrial espionage
• D. Network reconnaissance

Explanation: Only visible for Actual4dump members. You can sign-up / login (it's free).

The Chief Executive Officer (CEO) of an Internet service provider (ISP) has decided to limit the company's contribution to worldwide Distributed Denial of Service (DDoS) attacks. Which of the following should the
ISP implement? (Select TWO).

• A. Block traffic with an IP source not allocated to customers from exiting the ISP's network.
• B. Scan the ISP's customer networks using an up-to-date vulnerability scanner.
• C. Block traffic from the ISP's networks destined for blacklisted IPs.
• D. Prevent the ISP's customers from querying DNS servers other than those hosted by the ISP.
• E. Notify customers when services they run are involved in an attack.

Explanation: Only visible for Actual4dump members. You can sign-up / login (it's free).