512-50 Exam Dumps - EC-Council Information Security Manager (E|ISM)

Go to page:

<< First
Prev
1
2
3
4
5
6
7
8
Next
Last >>

Question # 41

Scenario: Your program is developed around minimizing risk to information by focusing on people, technology, and operations.

You have decided to deal with risk to information from people first. How can you minimize risk to your most sensitive information before granting access?

Conduct background checks on individuals before hiring them

Develop an Information Security Awareness program

Monitor employee browsing and surfing habits

Set your firewall permissions aggressively and monitor logs regularly.

Full Access

Question # 42

Which of the following are the triple constraints of project management?

Time, quality, and scope

Cost, quality, and time

Scope, time, and cost

Quality, scope, and cost

Full Access

Question # 43

Which of the following represents the best method of ensuring business unit alignment with security program requirements?

Provide clear communication of security requirements throughout the organization

Demonstrate executive support with written mandates for security policy adherence

Create collaborative risk management approaches within the organization

Perform increased audits of security processes and procedures

Full Access

Question # 44

How often should the SSAE16 report of your vendors be reviewed?

Quarterly

Semi-annually

Annually

Bi-annually

Full Access

Question # 45

This occurs when the quantity or quality of project deliverables is expanded from the original project plan.

Scope creep

Deadline extension

Scope modification

Deliverable expansion

Full Access

Question # 46

An application vulnerability assessment has identified a security flaw in an application. This is a flaw that was previously identified and remediated on a prior release of the application. Which of the following is MOST likely the reason for this recurring issue?

Ineffective configuration management controls

Lack of change management controls

Lack of version/source controls

High turnover in the application development department

Full Access

Question # 47

The company decides to release the application without remediating the high-risk vulnerabilities. Which of the following is the MOST likely reason for the company to release the application?

The company lacks a risk management process

The company does not believe the security vulnerabilities to be real

The company has a high risk tolerance

The company lacks the tools to perform a vulnerability assessment

Full Access

Question # 48

When updating the security strategic planning document what two items must be included?

Alignment with the business goals and the vision of the CIO

The risk tolerance of the company and the company mission statement

The executive summary and vision of the board of directors

The alignment with the business goals and the risk tolerance

Full Access