When calculating the risk associated with a vulnerability being exploited, how is this risk calculated?

A. Risk = Likelihood * Impact.

B. Risk = Likelihood / Impact.

C. Risk = Vulnerability / Threat.

D. Risk = Threat * Likelihood.

In order to better improve the security culture within an organisation with a top down approach, which of the following actions at board level is the MOST effective?

A. Appointment of a Chief Information Security Officer (CISO).

B. Purchasing all senior executives personal firewalls.

C. Adopting an organisation wide "clear desk" policy.

D. Developing a security awareness e-learning course.

Which of the following is the MOST important reason for undertaking Continual Professional Development (CPD) within the Information Security sphere?

A. Professional qualification bodies demand CPD.

B. Information Security changes constantly and at speed.

C. IT certifications require CPD and Security needs to remain credible.

D. CPD is a prerequisite of any Chartered Institution qualification.

What Is the first yet MOST simple and important action to take when setting up a new web server?

A. Change default system passwords.

B. Fully encrypt the hard disk.

C. Apply hardening to all applications.

D. Patch the OS to the latest version

What physical security control would be used to broadcast false emanations to mask the presence of true electromagentic emanations from genuine computing equipment?

A. Faraday cage.

B. Unshielded cabling.

C. Copper infused windows.

D. White noise generation.