712-50 Practice Test

712-50 Practice Test practice questions, page 7 of 25, with answer review and explanations.

Question 31

An organization has defined a set of standard security controls. This organization has also defined the circumstances and conditions in which they must be applied. What is the NEXT logical step in applying the controls in the organization?

  1. Determine the risk tolerance
  2. Perform an asset classification
  3. Analyze existing controls on systems
  4. Create an architecture gap analysis

Question 32

The single most important consideration to make when developing your security program, policies, and processes is:

  1. Alignment with the business
  2. Budgeting for unforeseen data compromises
  3. Establishing your authority as the Security Executive
  4. Streaming for efficiency

Question 33

In accordance with best practices and international standards, how often is security awareness training provided to employees of an organization?

  1. Every 18 months
  2. Every 12 months
  3. High risk environments 6 months, low-risk environments 12 months
  4. Every 6 months

Question 34

Which of the following is a MAJOR consideration when an organization retains sensitive customer data and uses this data to better target the organization's products and services?

  1. Strong authentication technologies
  2. Financial reporting regulations
  3. Credit card compliance and regulations
  4. Local privacy laws

Question 35

If your organization operates under a model of "assumption of breach", you should:

  1. Establish active firewall monitoring protocols
  2. Purchase insurance for your compliance liability
  3. Focus your security efforts on high value assets
  4. Protect all information resource assets equally