712-50 무료 덤프문제 온라인 액세스

A security professional has been promoted to be the CISO of an organization. The first task is to create a security policy for this organization. The CISO creates and publishes the security policy. This policy however, is ignored and not enforced consistently. Which of the following is the MOST likely reason for the policy shortcomings?

• A.Lack of formal definition of roles and responsibilities
• B.Lack of a formal security awareness program
• C.Lack of a formal risk management policy
• D.Lack of a formal security policy governance process

What would be the MOST likely reason a CISO sees abnormally high volumes of security exceptions within a number of business functions?

• A.This is normal since business units resist security requirements
• B.A lack of executive presence within the security program
• C.Poor alignment of the security program to the organization
• D.Weak audit support for the security program

You have been hired as the Information System Security Officer (ISSO) for a US federal government agency.
Your role is to ensure the security posture of the system is maintained. One of your tasks is to develop and maintain the system security plan (SSP) and supporting documentation.
Which of the following is NOT documented in the SSP?

• A.The results of a third-party audits and recommendations
• B.Type of information used in the system
• C.Name of the connected system
• D.The controls in place to secure the system

The organization does not have the time to remediate the vulnerability; however it is critical to release the application. Which of the following needs to be further evaluated to help mitigate the risks?

• A.Deploy Intrusion Detection Systems
• B.Implement Compensating Controls
• C.Provide security testing tools
• D.Provide developer security training

What are the three stages of an identity and access management system?

• A.Provision, Administration, Authentication
• B.Administration, Validation, Protect
• C.Authentication, Authorize, Validation
• D.Provision, Administration, Enforcement