Question 1

The effectiveness of social engineering penetration testing using phishing can be used as a Key Performance Indicator (KPI) for the effectiveness of an organization's

Options :

A : Risk Management Program.

B : Anti-Spam controls.

C : Security Awareness Program.

D : Identity and Access Management Program.

Answer: C

Question 2

What is the primary difference between regulations and standards?

Options :

A : Standards will include regulations

B : Standards that aren't followed are punishable by fines

C : Regulations are made enforceable by the power provided by laws

D : Regulations must be reviewed and approved by the business

Answer: C

Question 3

According to the National Institute of Standards and Technology (NIST) SP 800-40, which of the following considerations are MOST important when creating a vulnerability management program?

Options :

A : Susceptibility to attack, mitigation response time, and cost

B : Attack vectors, controls cost, and investigation staffing needs

C : Vulnerability exploitation, attack recovery, and mean time to repair

D : Susceptibility to attack, expected duration of attack, and mitigation availability
Topic 2, IS Management Controls and Auditing Management

Answer: A

Question 4

An organization information security policy serves to

Options :

A : establish budgetary input in order to meet compliance requirements

B : establish acceptable systems and user behavior

C : define security configurations for systems

D : define relationships with external law enforcement agencies

Answer: B

Question 5

As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building. Below your office window you notice a door that is normally propped open during the day for groups of people to take breaks outside. Upon looking closer you see there is no badge reader. What should you do?

Options :

A : Nothing, this falls outside your area of influence.

B : Close and chain the door shut and send a company-wide memo banning the practice.

C : Have a risk assessment performed.

D : Post a guard at the door to maintain physical security

Answer: C

Higher Test Marks with Free Online 712-50 Exam Practice

Buying Options: