712-50 Practice Test

712-50 Practice Test practice questions, page 22 of 25, with answer review and explanations.

Question 106

The success of the Chief Information Security Officer is MOST dependent upon:

  1. following the recommendations of consultants and contractors
  2. raising awareness of security issues with end users
  3. favorable audit findings
  4. development of relationships with organization executives

Question 107

During the course of a risk analysis your IT auditor identified threats and potential impacts. Next, your IT auditor should:

  1. Identify and assess the risk assessment process used by management.
  2. Identify and evaluate existing controls.
  3. Identify information assets and the underlying systems.
  4. Disclose the threats and impacts to management.

Question 108

Which of the following is a fundamental component of an audit record?

  1. Originating IP-Address
  2. Date and time of the event
  3. Failure of the event
  4. Authentication type

Question 109

What is the main purpose of the Incident Response Team?

  1. Communicate details of information security incidents
  2. Create effective policies detailing program activities
  3. Ensure efficient recovery and reinstate repaired systems
  4. Provide effective employee awareness programs

Question 110

Risk appetite directly affects what part of a vulnerability management program?

  1. Scope
  2. Schedule
  3. Staff
  4. Scan tools