712-50 Practice Test practice questions, page 18 of 25, with answer review and explanations.
Question 86
Which of the following is a critical operational component of an Incident Response Program (IRP)?
Monthly program tests to ensure resource allocation is sufficient for supporting the needs of the organization.
Weekly program budget reviews to ensure the percentage of program funding remains constant.
Annual review of program charters, policies, procedures and organizational agreements.
Daily monitoring of vulnerability advisories relating to your organization's deployed technologies.
Question 87
What is the first thing that needs to be completed in order to create a security program for your organization?
Security program budget
Compliance and regulatory analysis
Risk assessment
Business continuity plan
Question 88
As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building. Below your office window you notice a door that is normally propped open during the day for groups of people to take breaks outside. Upon looking closer, you see there is no badge reader. What should you do?
Post a guard at the door to maintain physical security
Close and chain the door shut and send a company-wide memo banning the practice
A physical risk assessment on the facility
Nothing, this falls outside your area of influence
Question 89
As the new CISO at the company you are reviewing the audit reporting process and notice that it includes only detailed technical diagrams. What else should be in the reporting process?
Names and phone numbers of those who conducted the audit
Executive summary
Penetration test agreement
Business charter
Question 90
Which of the following provides an audit framework?
Control Objectives for IT (COBIT)
International Organization Standard (ISO) 27002
Payment Card Industry ג€"Data Security Standard (PCI-DSS)
National Institute of Standards and technology (NIST) SP 800-30