Advance Your Career by Using Online 712-50 Dumps

1. What is one key difference between Capital expenditures and Operating expenditures?

2. The patching and monitoring of systems on a consistent schedule is required by?

3. SCENARIO: Critical servers show signs of erratic behavior within your organization’s intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team.

What phase of the response provides measures to reduce the likelihood of an incident from recurring?

4. Which of the following is the MOST important reason to measure the effectiveness of an Information Security Management System (ISMS)?

5. Control Objectives for Information and Related Technology (COBIT) is which of the following?

6. Which of the following best describes the purpose of the International Organization for Standardization (ISO) 27002 standard?

7. A stakeholder is a person or group:

8. A digital signature addresses which of the following concerns?

9. Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.

Which of the following would be the FIRST step when addressing Information Security formally and consistently in this organization?

10. Scenario: The new CISO was informed of all the Information Security projects that the section has in progress. Two projects are over a year behind schedule and way over budget.

Which of the following will be most helpful for getting an Information Security project that is behind schedule back on schedule?

11. Which of the following is MOST likely to be discretionary?

12. The implementation of anti-malware and anti-phishing controls on centralized email servers is an example of what type of security control?

13. SCENARIO: A CISO has several two-factor authentication systems under review and selects the one that is most sufficient and least costly. The implementation project planning is completed and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization’s needs.

The CISO is unsure of the information provided and orders a vendor proof of concept to validate the system’s scalability.

This demonstrates which of the following?

14. Knowing the potential financial loss an organization is willing to suffer if a system fails is a determination of which of the following?

15. An organization has a stated requirement to block certain traffic on networks. The implementation of controls will disrupt a manufacturing process and cause unacceptable delays, resulting in sever revenue disruptions.

Which of the following is MOST likely to be responsible for accepting the risk until mitigating controls can be implemented?

16. A CISO has implemented a risk management capability within the security portfolio.

Which of the following terms best describes this functionality?

17. The Security Operations Center (SOC) just purchased a new intrusion prevention system (IPS) that needs to be deployed in-line for best defense. The IT group is concerned about putting the new IPS in-line because it might negatively impact network availability.

What would be the BEST approach for the CISO to reassure the IT group?

18. In accordance with best practices and international standards, how often is security awareness training provided to employees of an organization?

19. When analyzing and forecasting an operating expense budget what are not included?

20. After a risk assessment is performed, a particular risk is considered to have the potential of costing the organization 1.2 Million USD.

This is an example of

21. From an information security perspective, information that no longer supports the main purpose of the business should be:

22. SCENARIO: A CISO has several two-factor authentication systems under review and selects the one that is most sufficient and least costly. The implementation project planning is completed and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization’s needs.

The CISO discovers the scalability issue will only impact a small number of network segments.

What is the next logical step to ensure the proper application of risk management methodology within the two-facto implementation project?

23. Which of the following terms is used to describe countermeasures implemented to minimize risks to physical property, information, and computing systems?

24. Scenario: You are the newly hired Chief Information Security Officer for a company that has not previously had a senior level security practitioner. The company lacks a defined security policy and framework for their Information Security Program. Your new boss, the Chief Financial Officer, has asked you to draft an outline of a security policy and recommend an industry/sector neutral information security control framework for implementation.

Which of the following industry / sector neutral information security control frameworks should you recommend for implementation?

25. You work as a project manager for TYU project. You are planning for risk mitigation. You need to quickly identify high-level risks that will need a more in-depth analysis.

Which of the following activities will help you in this?

26. When deploying an Intrusion Prevention System (IPS) the BEST way to get maximum protection from the system is to deploy it

27. Which of the following is MOST important when tuning an Intrusion Detection System (IDS)?

28. You have recently drafted a revised information security policy.

From whom should you seek endorsement in order to have the GREATEST chance for adoption and implementation throughout the entire organization?

29. Scenario: You are the newly hired Chief Information Security Officer for a company that has not previously had a senior level security practitioner. The company lacks a defined security policy and framework for their Information Security Program. Your new boss, the Chief Financial Officer, has asked you to draft an outline of a security policy and recommend an industry/sector neutral information security control framework for implementation.

Your Corporate Information Security Policy should include which of the following?

30. The ultimate goal of an IT security projects is:

31. An organization has defined a set of standard security controls. This organization has also defined the circumstances and conditions in which they must be applied.

What is the NEXT logical step in applying the controls in the organization?

32. Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates.

What is one proven method to account for common elements found within separate regulations and/or standards?

33. In MOST organizations which group periodically reviews network intrusion detection system logs for all systems as part of their daily tasks?

34. The success of the Chief Information Security Officer is MOST dependent upon:

35. An example of professional unethical behavior is:

36. Which of the following set of processes is considered to be one of the cornerstone cycles of the International Organization for Standardization (ISO) 27001 standard?

37. Which of the following is a primary method of applying consistent configurations to IT systems?

38. Information Security is often considered an excessive, after-the-fact cost when a project or initiative is completed.

What can be done to ensure that security is addressed cost effectively?

39. Your incident handling manager detects a virus attack in the network of your company. You develop a signature based on the characteristics of the detected virus.

Which of the following phases in the incident handling process will utilize the signature to resolve this incident?

40. Which of the following international standards can be BEST used to define a Risk Management process in an organization?

41. An application vulnerability assessment has identified a security flaw in an application. This is a flaw that was previously identified and remediated on a prior release of the application.

Which of the following is MOST likely the reason for this recurring issue?

42. Involvement of senior management is MOST important in the development of:

43. Scenario: Your corporate systems have been under constant probing and attack from foreign IP addresses for more than a week. Your security team and security infrastructure have performed well under the stress. You are confident that your defenses have held up under the test, but rumors are spreading that sensitive customer data has been stolen and is now being sold on the Internet by criminal elements. During your investigation of the rumored compromise you discover that data has been breached and you have discovered the repository of stolen data on a server located in a foreign country. Your team now has full access to the data on the foreign server.

Your defenses did not hold up to the test as originally thought. As you investigate how the data was compromised through log analysis you discover that a hardworking, but misguided business intelligence analyst posted the data to an obfuscated URL on a popular cloud storage service so they could work on it from home during their off-time.

Which technology or solution could you deploy to prevent employees from removing corporate data from your network? Choose the BEST answer.

44. An employee successfully avoids becoming a victim of a sophisticated spear phishing attack due to knowledge gained through the corporate information security awareness program.

What type of control has been effectively utilized?

45. An information security department is required to remediate system vulnerabilities when they are discovered. Please select the three primary remediation methods that can be used on an affected system.

46. When entering into a third party vendor agreement for security services, at what point in the process is it BEST to understand and validate the security posture and compliance level of the vendor?

47. A person in your security team calls you at night and informs you that one of your web applications is potentially under attack from a cross-site scripting vulnerability.

What do you do?

48. The executive board has requested that the CISO of an organization define and Key Performance Indicators (KPI) to measure the effectiveness of the security awareness program provided to call center employees.

Which of the following can be used as a KPI?

49. Scenario: Your company has many encrypted telecommunications links for their world-wide operations. Physically distributing symmetric keys to all locations has proven to be administratively burdensome, but symmetric keys are preferred to other alternatives.

Symmetric encryption in general is preferable to asymmetric encryption when:

50. The effectiveness of an audit is measured by?

51. Gaining Access

52. Providing oversight of a comprehensive information security program for the entire organization is the primary responsibility of which group under the InfoSec governance framework?

53. Your penetration testing team installs an in-line hardware key logger onto one of your network machines.

Which of the following is of major concern to the security organization?

54. A CISO sees abnormally high volumes of exceptions to security requirements and constant pressure from business units to change security processes.

Which of the following represents the MOST LIKELY cause of this situation?

55. The company decides to release the application without remediating the high-risk vulnerabilities.

Which of the following is the MOST likely reason for the company to release the application?

56. What two methods are used to assess risk impact?

57. A newly-hired CISO needs to understand the organization’s financial management standards for business units and operations.

Which of the following would be the best source of this information?

58. When gathering security requirements for an automated business process improvement program, which of the following is MOST important?

59. Which of the following is MOST useful when developing a business case for security initiatives?

60. Which of the following is considered to be an IT governance framework and a supporting toolset that allows for managers to bridge the gap between control requirements, technical issues, and business risks?

61. Which of the following are necessary to formulate responses to external audit findings?

62. A newly appointed security officer finds data leakage software licenses that had never been used. The officer decides to implement a project to ensure it gets installed, but the project gets a great deal of resistance across the organization.

Which of the following represents the MOST likely reason for this situation?

63. Who in the organization determines access to information?

64. Which of the following represents the BEST method for obtaining business unit acceptance of security controls within an organization?

65. How often should the Statements of Standards for Attestation Engagements-16 (SSAE16)/International Standard on Assurance Engagements 3402 (ISAE3402) report of your vendors be reviewed?

66. To get an Information Security project back on schedule, which of the following will provide the MOST help?

67. Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.

Which of the following frameworks and standards will BEST fit the organization as a baseline for their security program?

68. The PRIMARY objective of security awareness is to:

69. Regulatory requirements typically force organizations to implement

70. Which of the following activities results in change requests?

71. Which technology can provide a computing environment without requiring a dedicated hardware backend?

72. Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates.

When multiple regulations or standards apply to your industry you should set controls to meet the:

73. The process for management approval of the security certification process which states the risks and mitigation of such risks of a given IT system is called

74. The PRIMARY objective for information security program development should be:

75. Bob waits near a secured door, holding a box. He waits until an employee walks up to the secured door and uses the special card in order to access the restricted area of the target company. Just as the employee opens the door, Bob walks up to the employee (still holding the box) and asks the employee to hold the door open so that he can enter.

What is the best way to undermine the social engineering activity of tailgating?

76. A recommended method to document the respective roles of groups and individuals for a given process is to:

77. Simon had all his systems administrators implement hardware and software firewalls to ensure network security. They implemented IDS/IPS systems throughout the network to check for and stop any unauthorized traffic that may attempt to enter. Although Simon and his administrators believed they were secure, a hacker group was able to get into the network and modify files hosted on the company's website. After searching through the firewall and server logs, no one could find how the attackers were able to get in. He decides that the entire network needs to be monitored for critical and essential file changes. This monitoring tool alerts administrators when a critical file is altered.

What tool could Simon and his administrators implement to

accomplish this?

78. When a critical vulnerability has been discovered on production systems and needs to be fixed immediately, what is the BEST approach for a CISO to mitigate the vulnerability under tight budget constraints?

79. Credit card information, medical data, and government records are all examples of:

80. Your company has limited resources to spend on security initiatives. The Chief Financial Officer asks you to prioritize the protection of information resources based on their value to the company. It is essential that you be able to communicate in language that your fellow executives will understand.

You should:

81. Which of the following best summarizes the primary goal of a security program?

82. You have implemented a new security control.

Which of the following risk strategy options have you engaged in?

83. The MOST common method to get an unbiased measurement of the effectiveness of an Information Security Management System (ISMS) is to

84. In order for a CISO to have true situational awareness there is a need to deploy technology that can give a real-time view of security events across the enterprise.

Which tool selection represents the BEST choice to achieve situational awareness?

85. You manage a newly created Security Operations Center (SOC), your team is being inundated with security alerts and don’t know what to do.

What is the BEST approach to handle this situation?

86. Which of the following activities must be completed BEFORE you can calculate risk?

87. Within an organization’s vulnerability management program, who has the responsibility to implement remediation actions?

88. Risk that remains after risk mitigation is known as

89. What is the definition of Risk in Information Security?

90. The formal certification and accreditation process has four primary steps, what are they?

91. SCENARIO: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified.

After determining the audit findings are accurate, which of the following is the MOST logical next activity?

92. Assigning the role and responsibility of Information Assurance to a dedicated and independent security group is an example of:

93. The security team has investigated the theft/loss of several unencrypted laptop computers containing sensitive corporate information. To prevent the loss of any additional corporate data it is unilaterally decided by the CISO that all existing and future laptop computers will be encrypted. Soon, the help desk is flooded with complaints about the slow performance of the laptops and users are upset.

What did the CISO do wrong? (choose the BEST answer):

94. The CIO of an organization has decided to assign the responsibility of internal IT audit to the IT team.

This is consider a bad practice MAINLY because

95. Which is the BEST solution to monitor, measure, and report changes to critical data in a system?

96. Which of the following is considered the MOST effective tool against social engineering?

97. Which of the following functions MUST your Information Security Governance program include for formal organizational reporting?

98. A method to transfer risk is to:

99. Which business stakeholder is accountable for the integrity of a new information system?

100. Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.

This global retail company is expected to accept credit card payments.

Which of the following is of MOST concern when defining a security program for this organization?

101. A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization.

Which of the following principles does this best demonstrate?

102. Which of the following provides an audit framework?

103. Which of the following is the MOST important reason for performing assessments of the security portfolio?

104. When dealing with a risk management process, asset classification is important because it will impact the overall:

105. Which of the following functions evaluates patches used to close software vulnerabilities of new systems to assure compliance with policy when implementing an information security program?

106. What oversight should the information security team have in the change management process for application security?

107. Which of the following most commonly falls within the scope of an information security governance steering committee?

108. Scenario: Your company has many encrypted telecommunications links for their world-wide operations. Physically distributing symmetric keys to all locations has proven to be administratively burdensome, but symmetric keys are preferred to other alternatives.

How can you reduce the administrative burden of distributing symmetric keys for your employer?

109. What is meant by password aging?

110. The Annualized Loss Expectancy (Before) minus Annualized Loss Expectancy (After) minus Annual Safeguard Cost is the formula for determining:

111. The single most important consideration to make when developing your security program, policies, and processes is:

112. An organization information security policy serves to

113. A Security Operations Centre (SOC) manager is informed that a database containing highly sensitive corporate strategy information is under attack. Information has been stolen and the database server was disconnected.

Who must be informed of this incident?

114. SCENARIO: Critical servers show signs of erratic behavior within your organization’s intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team.

During initial investigation, the team suspects criminal activity but cannot initially prove or disprove illegal actions.

What is the MOST critical aspect of the team’s activities?

115. The general ledger setup function in an enterprise resource package allows for setting accounting periods. Access to this function has been permitted to users in finance, the shipping department, and production scheduling.

What is the most likely reason for such broad access?

116. How often should an environment be monitored for cyber threats, risks, and exposures?

117. When a CISO considers delaying or not remediating system vulnerabilities which of the following are MOST important to take into account?

118. A CISO wants to change the defense strategy to ward off attackers.

To accomplish this the CISO is looking to a strategy where attackers are lured into a zone of a safe network where attackers can be monitored, controlled, quarantined, or eradicated.

119. When should IT security project management be outsourced?