CAS-003 Exam Question 41

The Chief Information Officer (CIO) has been asked to develop a security dashboard with the relevant
metrics. The board of directors will use the dashboard to monitor and track the overall security posture of
the organization. The CIO produces a basic report containing both KPI and KRI data in two separate
sections for the board to review.
Which of the following BEST meets the needs of the board?
  • CAS-003 Exam Question 42

    The Chief Information Officer (CIO) has been asked to develop a security dashboard with the relevant metrics.
    The board of directors will use the dashboard to monitor and track the overall security posture of the organization. The CIO produces a basic report containing both KPI and KRI data in two separate sections for the board to review.
    Which of the following BEST meets the needs of the board?
  • CAS-003 Exam Question 43

    An information security manager is concerned that connectivity used to configure and troubleshoot critical network devices could be attacked. The manager has tasked a network security engineer with meeting the following requirements:
    Encrypt all traffic between the network engineer and critical devices.
    Segregate the different networking planes as much as possible.
    Do not let access ports impact configuration tasks.
    Which of the following would be the BEST recommendation for the network security engineer to present?
  • CAS-003 Exam Question 44

    A company's Chief Operating Officer (COO) is concerned about the potential for competitors to infer proprietary information gathered from employees' social media accounts.
    Which of the following methods should the company use to gauge its social media threat level without targeting individual employees?
  • CAS-003 Exam Question 45

    A large hospital has implemented BYOD to allow doctors and specialists the ability to access patient medical records on their tablets. The doctors and specialists access patient records over the hospital's guest WiFi network which is isolated from the internal network with appropriate security controls. The patient records management system can be accessed from the guest network and require two factor authentication. Using a remote desktop type interface, the doctors and specialists can interact with the hospital's system.
    Cut and paste and printing functions are disabled to prevent the copying of data to BYOD devices. Which of the following are of MOST concern? (Select TWO).