712-50 Practice Test

712-50 Practice Test practice questions, page 21 of 25, with answer review and explanations.

Question 101

Which of the following activities results in change requests?

  1. Corrective actions
  2. Defect repair
  3. Preventive actions
  4. Inspection

Question 102

What is the MAIN reason for conflicts between Information Technology and Information Security programs?

  1. The effective implementation of security controls can be viewed as an inhibitor to rapid Information technology implementations.
  2. Technology Governance is focused on process risks whereas Security Governance is focused on business risk.
  3. Technology governance defines technology policies and standards while security governance does not.
  4. Security governance defines technology best practices and Information Technology governance does not.

Question 103

Which of the following is the MOST important for a CISO to understand when identifying threats?

  1. How the security operations team will behave to reported incidents
  2. How vulnerabilities can potentially be exploited in systems that impact the organization
  3. How the firewall and other security devices are configured to prevent attacks
  4. How the incident management team prepares to handle an attack

Question 104

Who is responsible for securing networks during a security incident?

  1. Security Operations Center (SOC)
  2. Chief Information Security Officer (CISO)
  3. Disaster Recovery (DR) manager
  4. Incident response Team (IRT)

Question 105

What is the BEST way to achieve on-going compliance monitoring in an organization?

  1. Outsource compliance to a 3 rd party vendor and let them manage the program.
  2. Have Compliance Direct Information Security to fix issues after the auditor's report.
  3. Only check compliance right before the auditors are scheduled to arrive onsite.
  4. Have Compliance and Information Security partner to correct issues as they arise.