712-50 Practice Test

712-50 Practice Test practice questions, page 16 of 25, with answer review and explanations.

Question 76

Which of the following are the MOST important factors for proactively determining system vulnerabilities?

  1. Subscribe to vendor mailing lists and distribute notifications of system requirements
  2. Configure firewall, perimeter router and Intrusion Prevention System (IPS)
  3. Conduct security testing, vulnerability scanning, and penetration testing
  4. Deploy Intrusion Detection System (IDS) and install anti-virus on systems

Question 77

When choosing a risk mitigation method what is the MOST important factor?

  1. Approval from the board of directors
  2. Metrics of mitigation method success
  3. Cost of the mitigation is less than a risk
  4. Mitigation method complies with PCI regulations

Question 78

Payment Card Industry (PCI) compliance requirements are based on what criteria?

  1. The size of the organization processing credit card data
  2. The types of cardholder data retained
  3. The duration card holder data is retained
  4. The number of transactions performed per year by an organization

Question 79

What role should the CISO play in properly scoping a PCI environment?

  1. Complete the self-assessment questionnaire and work with an Approved Scanning Vendor (ASV) to determine scope
  2. Work with a Qualified Security Assessor (QSA) to determine the scope of the PCI environment
  3. Validate the business units' suggestions as to what should be included in the scoping process
  4. Ensure internal scope validation is completed and that an assessment has been done to discover all credit card data

Question 80

Which of the following reports should you as an IT auditor use to check on compliance with a Service Level Agreement (SLA) requirement for uptime?

  1. Systems logs
  2. Hardware error reports
  3. Availability reports
  4. Utilization reports