712-50 Practice Test practice questions, page 13 of 25, with answer review and explanations.
Question 61
Your IT auditor is reviewing significant events from the previous year and has identified some procedural oversights. Which of the following would be the MOST concerning?
Failure to notify police of an attempted intrusion
Lack of reporting of a successful denial of service attack on the network.
Lack of periodic examination of access rights
Lack of notification to the public of disclosure of confidential information
Question 62
Which of the following best represents a calculation for Annual Loss Expectancy (ALE)?
Value of the asset multiplied by the loss expectancy
Replacement cost multiplied by the single loss expectancy
Single loss expectancy multiplied by the annual rate of occurrence
Total loss expectancy multiplied by the total loss frequency
Question 63
The Information Security Management program MUST protect:
Audit schedules and findings
Intellectual property released into the public domain
all organizational assets
critical business processes and revenue streams
Question 64
Dataflow diagrams are used by IT auditors to:
Graphically summarize data paths and storage processes.
Order data hierarchically
Highlight high-level data definitions
Portray step-by-step details of data generation.
Question 65
When measuring the effectiveness of an Information Security Management System which one of the following would be MOST LIKELY used as a metric framework?