512-50 무료 덤프문제 온라인 액세스

To have accurate and effective information security policies how often should the CISO review the organization policies?

• A.Quarterly
• B.At least once a year
• C.Every 6 months
• D.Before an audit

When dealing with risk, the information security practitioner may choose to:

• A.acknowledge
• B.assign
• C.defer
• D.transfer

Which of the following illustrates an operational control process:

• A.Conducting an audit of the configuration management process
• B.Classifying an information system as part of a risk assessment
• C.Establishing procurement standards for cloud vendors
• D.Installing an appropriate fire suppression system in the data center

Developing effective security controls is a balance between:

• A.Technology and Vendor Management
• B.Corporate Culture and Job Expectations
• C.Risk Management and Operations
• D.Operations and Regulations

When a CISO considers delaying or not remediating system vulnerabilities which of the following are MOST important to take into account?

• A.Risk Transfer, Reputational Impact, and Consequences of Compromise
• B.Risk Avoidance, Threat Level, and Consequences of Compromise
• C.Threat Level, Risk of Compromise, and Consequences of Compromise
• D.Reputational Impact, Financial Impact, and Risk of Compromise