Advance Your Career by Using Online 712-50 Dumps

1. Which of the following is a MAJOR consideration when an organization retains sensitive customer data and uses this data to better target the organization’s products and services?

2. A global health insurance company is concerned about protecting confidential information.

Which of the following is of MOST concern to this organization?

3. The purpose of NIST SP 800-53 as part of the NIST System Certification and Accreditation Project is to establish a set of standardized, minimum security controls for IT systems addressing low, moderate, and high levels of concern for

4. As the CISO, you have been tasked with the execution of the company’s key management program. You MUST ensure the integrity of encryption keys at the point of generation.

Which principal of encryption key control will ensure no single individual can constitute or re-constitute a key?

5. Acme Inc. has engaged a third party vendor to provide 99.999% up-time for their online web presence and had them contractually agree to this service level agreement.

What type of risk tolerance is Acme exhibiting? (choose the BEST answer):

6. Which of the following backup sites takes the longest recovery time?

7. Quantitative Risk Assessments have the following advantages over qualitative risk assessments:

8. An organization is required to implement background checks on all employees with access to databases containing credit card information. This is considered a security

9. While designing a secondary data center for your company what document needs to be analyzed to determine to how much should be spent on building the data center?

10. When dealing with a risk management process, asset classification is important because it will impact the overall:

11. A Security Operations Manager is finding it difficult to maintain adequate staff levels to monitor security operations during off-hours. To reduce the impact of staff shortages and increase coverage during off-hours, the SecOps manager is considering outsourcing off-hour coverage.

What Security Operations Center (SOC) model does this BEST describe?

12. What is the first thing that needs to be completed in order to create a security program for your organization?

13. Scenario: As you begin to develop the program for your organization, you assess the corporate culture and determine that there is a pervasive opinion that the security program only slows things down and limits the performance of the “real workers.”

Which group of people should be consulted when developing your security program?

14. Payment Card Industry (PCI) compliance requirements are based on what criteria?

15. A department within your company has proposed a third party vendor solution to address an urgent, critical business need. As the CISO you have been asked to accelerate screening of their security control claims.

Which of the following vendor provided documents is BEST to make your decision:

16. Which of the following BEST describes an international standard framework that is based on the security model Information Technology―Code of Practice for Information Security Management?

17. When entering into a third party vendor agreement for security services, at what point in the process is it BEST to understand and validate the security posture and compliance level of the vendor?

18. The process for management approval of the security certification process which states the risks and mitigation of such risks of a given IT system is called

19. Bob waits near a secured door, holding a box. He waits until an employee walks up to the secured door and uses the special card in order to access the restricted area of the target company. Just as the employee opens the door, Bob walks up to the employee (still holding the box) and asks the employee to hold the door open so that he can enter.

What is the best way to undermine the social engineering activity of tailgating?

20. A method to transfer risk is to:

21. Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.

The CISO has been able to implement a number of technical controls and is able to influence the Information Technology teams but has not been able to influence the rest of the organization.

From an organizational perspective, which of the following is the LIKELY reason for this?

22. What is the FIRST step in developing the vulnerability management program?

23. A cloud computing environment that is bound together by technology that allows data and applications to be shared between public and private clouds is BEST referred to as a?

24. After a risk assessment is performed, a particular risk is considered to have the potential of costing the organization 1.2 Million USD. This is an example of

25. Which of the following terms is used to describe countermeasures implemented to minimize risks to physical property, information, and computing systems?

26. Which of the following is the MOST effective method for discovering common technical vulnerabilities within the IT environment?

27. Scenario: Your corporate systems have been under constant probing and attack from foreign IP addresses for more than a week. Your security team and security infrastructure have performed well under the stress. You are confident that your defenses have held up under the test, but rumors are spreading that sensitive customer data has been stolen and is now being sold on the Internet by criminal elements. During your investigation of the rumored compromise you discover that data has been breached and you have discovered the repository of stolen data on a server located in a foreign country. Your team now has full access to the data on the foreign server.

Your defenses did not hold up to the test as originally thought. As you investigate how the data was compromised through log analysis you discover that a hardworking, but misguided business intelligence analyst posted the data to an obfuscated URL on a popular cloud storage service so they could work on it from home during their off-time.

Which technology or solution could you deploy to prevent employees from removing corporate data from your network? Choose the BEST answer.

28. The security team has investigated the theft/loss of several unencrypted laptop computers containing sensitive corporate information. To prevent the loss of any additional corporate data it is unilaterally decided by the CISO that all existing and future laptop computers will be encrypted. Soon, the help desk is flooded with complaints about the slow performance of the laptops and users are upset.

What did the CISO do wrong? (choose the BEST answer):

29. Which of the following is MOST beneficial in determining an appropriate balance between uncontrolled innovation and excessive caution in an organization?

30. An organization's Information Security Policy is of MOST importance because

31. When reviewing a Solution as a Service (SaaS) provider’s security health and posture, which key document should you review?

32. Your IT auditor is reviewing significant events from the previous year and has identified some procedural oversights.

Which of the following would be the MOST concerning?

33. A newly-hired CISO needs to understand the organization’s financial management standards for business units and operations.

Which of the following would be the best source of this information?

34. When creating contractual agreements and procurement processes why should security requirements be included?

35. What is the BEST way to achieve on-going compliance monitoring in an organization?

36. Which of the following intellectual Property components is focused on maintaining brand recognition?

37. Your incident response plan should include which of the following?

38. When a critical vulnerability has been discovered on production systems and needs to be fixed immediately, what is the BEST approach for a CISO to mitigate the vulnerability under tight budget constraints?

39. Which of the following is a major benefit of applying risk levels?

40. The ultimate goal of an IT security projects is:

41. A severe security threat has been detected on your corporate network. As CISO you quickly assemble key members of the Information Technology team and business operations to determine a modification to security controls in response to the threat.

This is an example of:

42. Which of the following defines the boundaries and scope of a risk assessment?

43. What is the SECOND step to creating a risk management methodology according to the National Institute of Standards and Technology (NIST) SP 800-30 standard?

44. Dataflow diagrams are used by IT auditors to:

45. What is a difference from the list below between quantitative and qualitative Risk Assessment?

46. What are the common data hiding techniques used by criminals?

47. The implementation of anti-malware and anti-phishing controls on centralized email servers is an example of what type of security control?

48. Within an organization’s vulnerability management program, who has the responsibility to implement remediation actions?

49. Which of the following activities results in change requests?

50. When managing the critical path of an IT security project, which of the following is MOST important?

51. Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.

This global retail company is expected to accept credit card payments.

Which of the following is of MOST concern when defining a security program for this organization?

52. Which of the following is an accurate description of a balance sheet?

53. Creating a secondary authentication process for network access would be an example of?

54. An organization recently acquired a Data Loss Prevention (DLP) solution, and two months after the implementation, it was found that sensitive data was posted to numerous Dark Web sites. The DLP application was checked, and there are no apparent malfunctions and no errors.

What is the MOST likely reason why the sensitive data was posted?

55. Which of the following is the MOST important benefit of an effective security governance process?

56. Access Control lists (ACLs), Firewalls, and Intrusion Prevention Systems are examples of

57. Where does bottom-up financial planning primarily gain information for creating budgets?

58. Which of the following best describes revenue?

59. What is the MAIN reason for conflicts between Information Technology and Information Security programs?

60. SCENARIO: A CISO has several two-factor authentication systems under review and selects the one that is most sufficient and least costly. The implementation project planning is completed and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization’s needs.

The CISO discovers the scalability issue will only impact a small number of network segments.

What is the next logical step to ensure the proper application of risk management methodology within the two-facto implementation project?

61. A key cybersecurity feature of a Personal Identification Verification (PIV) Card is:

62. During a cyber incident, which non-security personnel might be needed to assist the security team?

63. A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization.

Which of the following principles does this best demonstrate?

64. Who should be involved in the development of an internal campaign to address email phishing?

65. Devising controls for information security is a balance between?

66. The executive board has requested that the CISO of an organization define and Key Performance Indicators (KPI) to measure the effectiveness of the security awareness program provided to call center employees.

Which of the following can be used as a KPI?

67. Which of the following best summarizes the primary goal of a security program?

68. The CIO of an organization has decided to assign the responsibility of internal IT audit to the IT team. This is consider a bad practice MAINLY because

69. Many times a CISO may have to speak to the Board of Directors (BOD) about their cyber security posture.

What would be the BEST choice of security metrics to present to the BOD?

70. Physical security measures typically include which of the following components?

71. The amount of risk an organization is willing to accept in pursuit of its mission is known as

72. A recent audit has identified a few control exceptions and is recommending the implementation of technology and processes to address the finding.

Which of the following is the MOST likely reason for the organization to reject the implementation of the recommended technology and processes?

73. Which of the following tests is an IS auditor performing when a sample of programs is selected to determine if the source and object versions are the same?

74. The MOST common method to get an unbiased measurement of the effectiveness of an Information Security Management System (ISMS) is to

75. Who is responsible for verifying that audit directives are implemented?

76. Which of the following activities must be completed BEFORE you can calculate risk?

77. The Board of Directors of a publicly-traded company is concerned about the security implications of a strategic project that will migrate 50% of the organization’s information technology assets to the cloud. They have requested a briefing on the project plan and a progress report of the security stream of the project. As the CISO, you have been tasked with preparing the report for the Chief Executive Officer to present.

Using the Earned Value Management (EVM), what does a Cost Variance (CV) of -1,200 mean?

78. You have been hired as the Information System Security Officer (ISSO) for a US federal government agency. Your role is to ensure the security posture of the system is maintained. One of your tasks is to develop and maintain the system security plan (SSP) and supporting documentation.

Which of the following is NOT documented in the SSP?

79. Who in the organization determines access to information?

80. Scenario: You are the CISO and have just completed your first risk assessment for your organization. You find many risks with no security controls, and some risks with inadequate controls. You assign work to your staff to create or adjust existing security controls to ensure they are adequate for risk mitigation needs.

You have identified potential solutions for all of your risks that do not have security controls.

What is the NEXT step?

81. What is the primary difference between regulations and standards?

82. Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates.

When multiple regulations or standards apply to your industry you should set controls to meet the:

83. Which technology can provide a computing environment without requiring a dedicated hardware backend?

84. A new CISO just started with a company and on the CISO's desk is the last complete Information Security Management audit report. The audit report is over two years old.

After reading it, what should be the CISO's FIRST priority?

85. The alerting, monitoring and life-cycle management of security related events is typically handled by the

86. Which of the following represents the best method of ensuring business unit alignment with security program requirements?

87. Of the following types of SOCs (Security Operations Centers), which one would be MOST likely used if the CISO has decided to outsource the infrastructure and administration of it?

88. Scenario: You are the CISO and have just completed your first risk assessment for your organization. You find many risks with no security controls, and some risks with inadequate controls. You assign work to your staff to create or adjust existing security controls to ensure they are adequate for risk mitigation needs.

When formulating the remediation plan, what is a required input?

89. According to ISO 27001, of the steps for establishing an Information Security Governance program listed below, which comes first?

90. Which of the following is the MOST effective way to measure the effectiveness of security controls on a perimeter network?

91. Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.

From an Information Security Leadership perspective, which of the following is a MAJOR concern about the CISO’s approach to security?

92. A CISO implements smart cards for credential management, and as a result has reduced costs associated with help desk operations supporting password resets.

This demonstrates which of the following principles?

93. Your organization provides open guest wireless access with no captive portals.

What can you do to assist with law enforcement investigations if one of your guests is suspected of committing an illegal act using your network?

94. A business unit within your organization intends to deploy a new technology in a manner that places it in violation of existing information security standards.

What immediate action should the information security manager take?

95. Which of the following are the MOST important factors for proactively determining system vulnerabilities?

96. The primary responsibility for assigning entitlements to a network share lies with which role?

97. In MOST organizations which group periodically reviews network intrusion detection system logs for all systems as part of their daily tasks?

98. The BEST organization to provide a comprehensive, independent and certifiable perspective on established security controls in an environment is

99. Which of the following is the MOST important for a CISO to understand when identifying threats?

100. If a Virtual Machine’s (VM) data is being replicated and that data is corrupted, this corruption will automatically be replicated to the other machine(s).

What would be the BEST control to safeguard data integrity?

101. An example of professional unethical behavior is:

102. A CISO must conduct risk assessments using a method where the Chief Financial Officer (CFO) receives impact data in financial terms to use as input to select the proper level of coverage in a new cybersecurity insurance policy.

What is the MOST effective method of risk analysis to provide the CFO with the information required?

103. The Information Security Governance program MUST:

104. What is the THIRD state of the Tuckman Stages of Group Development?

105. The network administrator wants to strengthen physical security in the organization. Specifically, to implement a solution stopping people from entering certain restricted zones without proper credentials.

Which of following physical security measures should the administrator use?

106. Risk appetite is typically determined by which of the following organizational functions?

107. Which of the following is a primary method of applying consistent configurations to IT systems?

108. Which of the following is considered to be an IT governance framework and a supporting toolset that allows for managers to bridge the gap between control requirements, technical issues, and business risks?

109. When an organization claims it is secure because it is PCI-DSS certified, what is a good first question to ask towards assessing the effectiveness of their security program?

110. What should an organization do to ensure that they have a sound Business Continuity (BC) Plan?

111. An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System.

Which of the following international standards can BEST assist this organization?

112. SQL injection is a very popular and successful injection attack method. Identify the basic SQL injection text:

113. The primary purpose of a risk register is to:

114. A CISO has implemented a risk management capability within the security portfolio.

Which of the following terms best describes this functionality?

115. What does RACI stand for?

116. Annual Loss Expectancy is derived from the function of which two factors?

117. Which of the following is used to lure attackers into false environments so they can be monitored, contained, or blocked from reaching critical systems?

118. You currently cannot provide for 24/7 coverage of your security monitoring and incident response duties and your company is resistant to the idea of adding more full-time employees to the payroll.

Which combination of solutions would help to provide the coverage needed without the addition of more dedicated staff? (choose the best answer):

119. As the CISO, you are the project sponsor for a highly visible log management project. The objective of the project is to centralize all the enterprise logs into a security information and event management (SIEM) system. You requested the results of the performance quality audits activity.

The performance quality audit activity is done in what project management process group?

120. You have a system with 2 identified risks. You determine the probability of one risk occurring is higher than the

121. The mean time to patch, number of virus outbreaks prevented, and number of vulnerabilities mitigated are examples of what type of performance metrics?

122. Which of the following is the MOST important reason for performing assessments of the security portfolio?

123. Risk is defined as:

124. Which of the following is MOST important when dealing with an Information Security Steering committee:

125. Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN.

Once supervisors and data owners have approved requests, information system administrators will implement

126. Which of the following methodologies references the recommended industry standard that Information security project managers should follow?

127. When you develop your audit remediation plan what is the MOST important criteria?

128. A company wants to fill a Chief Information Security Officer position.

Which of the following qualifications and experience would be MOST desirable in a candidate?

129. As the CISO for your company you are accountable for the protection of information resources commensurate with:

130. What type of attack requires the least amount of technical equipment and has the highest success rate?

131. In defining a strategic security plan for an organization, what should a CISO first analyze?

132. Which of the following is considered the MOST effective tool against social engineering?

133. You manage a newly created Security Operations Center (SOC), your team is being inundated with security alerts and don’t know what to do.

What is the BEST approach to handle this situation?

134. Which of the following is an accurate statement regarding capital expenses?

135. The process of creating a system which divides documents based on their security level to manage access to private data is known as

136. An organization licenses and uses personal information for business operations, and a server containing that information has been compromised.

What kind of law would require notifying the owner or licensee of this incident?

137. Which International Organization for Standardization (ISO) below BEST describes the performance of risk management, and includes a five-stage risk management methodology.

138. The process of identifying and classifying assets is typically included in the