Question 1

The Information Security Management program MUST protect:

Options :

A : all organizational assets

B : critical business processes and /or revenue streams

C : intellectual property released into the public domain

D : against distributed denial of service attacks

Answer: B

Question 2

Which of the following are the MOST important factors for proactively determining system vulnerabilities?

Options :

A : Subscribe to vendor mailing list to get notification of system vulnerabilities

B : Deploy Intrusion Detection System (IDS) and install anti-virus on systems

C : Configure firewall, perimeter router and Intrusion Prevention System (IPS)

D : Conduct security testing, vulnerability scanning, and penetration testing

Answer: D

Question 3

Providing oversight of a comprehensive information security program for the entire organization is the primary responsibility of which group under the InfoSec governance framework?

Options :

A : Senior Executives

B : Office of the Auditor

C : Office of the General Counsel

D : All employees and users

Answer: A

Question 4

An IT auditor has recently discovered that because of a shortage of skilled operations personnel, the security administrator has agreed to work one late night shift a week as the senior computer operator. The most appropriate course of action for the IT auditor is to:

Options :

A : Inform senior management of the risk involved.

B : Agree to work with the security officer on these shifts as a form of preventative control.

C : Develop a computer assisted audit technique to detect instances of abuses of the arrangement.

D : Review the system log for each of the late night shifts to determine whether any irregular actions occurred

Answer: A

Question 5

A security officer wants to implement a vulnerability scanning program. The officer is uncertain of the state of vulnerability resiliency within the organization’s large IT infrastructure. What would be the BEST approach to minimize scan data output while retaining a realistic view of system vulnerability?

Options :

A : Scan a representative sample of systems

B : Perform the scans only during off-business hours

C : Decrease the vulnerabilities within the scan tool settings

D : Filter the scan output so only pertinent data is analyzed

Answer: A

Smartly Prepare Exam with Free Online 512-50 Practice Test

Buying Options: