712-50 Practice Test

712-50 Practice Test practice questions, page 23 of 25, with answer review and explanations.

Question 111

Creating a secondary authentication process for network access would be an example of?

  1. An administrator with too much time on their hands
  2. Supporting the concept of layered security
  3. Network segmentation
  4. Putting undue time commitment on the system administrator

Question 112

According to ISO 27001, of the steps for establishing an Information Security Governance program listed below, which comes first?

  1. Decide how to manage risk
  2. Define Information Security Policy
  3. Identify threats, risks, impacts and vulnerabilities
  4. Define the budget of the Information Security Management System

Question 113

Which of the following functions MUST your Information Security Governance program include for formal organizational reporting?

  1. Human Resources and Budget
  2. Audit and Legal
  3. Budget and Compliance
  4. Legal and Human Resources

Question 114

The implementation of anti-malware and anti-phishing controls on centralized email servers is an example of what type of security control?

  1. Technical control
  2. Management control
  3. Procedural control
  4. Organization control

Question 115

Which of the following is a term related to risk management that represents the estimated frequency at which a threat is expected to transpire?

  1. Temporal Probability (TP)
  2. Annualized Rate of Occurrence (ARO)
  3. Single Loss Expectancy (SLE)
  4. Exposure Factor (EF)