712-50 Practice Test

712-50 Practice Test practice questions, page 15 of 25, with answer review and explanations.

Question 71

The regular review of a firewall ruleset is considered a _______________________.

  1. Procedural control
  2. Organization control
  3. Management control
  4. Technical control

Question 72

The exposure factor of a threat to your organization is defined by?

  1. Annual loss expectancy minus current cost of controls
  2. Percentage of loss experienced due to a realized threat event
  3. Asset value times exposure factor
  4. Annual rate of occurrence

Question 73

The Information Security Governance program MUST:

  1. integrate with other organizational governance processes
  2. show a return on investment for the organization
  3. integrate with other organizational governance processes
  4. support user choice for Bring Your Own Device (BYOD)

Question 74

You have recently drafted a revised information security policy. From whom should you seek endorsement in order to have the GREATEST chance for adoption and implementation throughout the entire organization?

  1. Chief Executive Officer
  2. Chief Information Officer
  3. Chief Information Security Officer
  4. Chief Information Officer

Question 75

Which of the following is a benefit of a risk-based approach to audit planning?

  1. Resources are allocated to the areas of the highest concern
  2. Scheduling may be performed months in advance
  3. Budgets are more likely to be met by the IT audit staff
  4. Staff will be exposed to a variety of technologies