712-50 Practice Test practice questions, page 24 of 25, with answer review and explanations.
Question 116
A security officer wants to implement a vulnerability scanning program. The officer is uncertain of the state of vulnerability resiliency within the organization's large IT infrastructure. What would be the BEST approach to minimize scan data output while retaining a realistic view of system vulnerability?
Decrease the vulnerabilities within the scan tool settings
Scan a representative sample of systems
Filter the scan output so only pertinent data is analyzed
Perform the scans only during off-business hours
Question 117
What should an organization do to ensure that they have a sound Business Continuity (BC) Plan?
Conduct a Disaster Recovery (DR) exercise every year to test the plan
Conduct periodic tabletop exercises to refine the BC plan
Test every three years to ensure that the BC plan is valid
Define the Recovery Point Objective (RPO)
Question 118
According to the National Institute of Standards and Technology (NIST) SP 800-40, which of the following considerations are MOST important when creating a vulnerability management program?
Susceptibility to attack, expected duration of attack, and mitigation availability
Attack vectors, controls cost, and investigation staffing needs
Susceptibility to attack, mitigation response time, and cost
Vulnerability exploitation, attack recovery, and mean time to repair
Question 119
When deploying an Intrusion Prevention System (IPS), the BEST way to get maximum protection from the system is to deploy it___________
In-line and turn on alert mode to stop malicious traffic.
In promiscuous mode and block malicious traffic.
In promiscuous mode and only detect malicious traffic.
In-line and turn on blocking mode to stop malicious traffic in-line.
Question 120
Which of the following is a weakness of an asset or group of assets that can be exploited by one or more threats?