712-50 Practice Test

712-50 Practice Test practice questions, page 19 of 25, with answer review and explanations.

Question 91

Which of the following is used to establish and maintain a framework to provide assurance that information security strategies are aligned with organizational objectives?

  1. Governance
  2. Compliance
  3. Awareness
  4. Management

Question 92

Which of the following is the MOST important goal of risk management?

  1. Finding economic balance between the impact of the risk and the cost of the control
  2. Identifying the victim of any potential exploits
  3. Identifying the risk
  4. Assessing the impact of potential threats

Question 93

What is the SECOND step to creating a risk management methodology according to the National Institute of Standards and Technology (NIST) SP 800-30 standard?

  1. Mitigate risk
  2. Perform a risk assessment
  3. Determine appetite
  4. Evaluate risk avoidance criteria

Question 94

Which of the following tests is performed by an Information Systems (IS) auditor when a sample of programs is selected to determine if the source and object versions are the same?

  1. A substantive test of program library controls
  2. A compliance test of the program compiler controls
  3. A compliance test of program library controls
  4. A substantive test of the program compiler controls

Question 95

When creating a vulnerability scan schedule, who is the MOST critical person to communicate with in order to ensure impact of the scan is minimized?

  1. The asset manager
  2. The project manager
  3. The asset owner
  4. The data custodian