EC-Council Information Security Manager (E|ISM) (512-50) Practice Test

Questions # 1:

Information security policies should be reviewed:

Options:

by stakeholders at least annually

by the CISO when new systems are brought online

by the Incident Response team after an audit

by internal audit semiannually

Questions # 2:

What is a difference from the list below between quantitative and qualitative Risk Assessment?

Options:

Quantitative risk assessments result in an exact number (in monetary terms)

Qualitative risk assessments result in a quantitative assessment (high, medium, low, red, yellow, green)

Qualitative risk assessments map to business objectives

Quantitative risk assessments result in a quantitative assessment (high, medium, low, red, yellow, green)

Questions # 3:

The establishment of a formal risk management framework and system authorization program is essential. The LAST step of the system authorization process is:

Options:

Contacting the Internet Service Provider for an IP scope

Getting authority to operate the system from executive management

Changing the default passwords

Conducting a final scan of the live system and mitigating all high and medium level vulnerabilities

Questions # 4:

The FIRST step in establishing a security governance program is to?

Options:

Conduct a risk assessment.

Obtain senior level sponsorship.

Conduct a workshop for all end users.

Prepare a security budget.

Questions # 5:

Developing effective security controls is a balance between:

Options:

Risk Management and Operations

Corporate Culture and Job Expectations

Operations and Regulations

Technology and Vendor Management

Questions # 6:

An organization information security policy serves to

Options:

establish budgetary input in order to meet compliance requirements

establish acceptable systems and user behavior

define security configurations for systems

define relationships with external law enforcement agencies

Questions # 7:

Which of the following is used to establish and maintain a framework to provide assurance that information security strategies are aligned with organizational objectives?

Options:

Awareness

Compliance

Governance

Management

Questions # 8:

One of the MAIN goals of a Business Continuity Plan is to

Options:

Ensure all infrastructure and applications are available in the event of a disaster

Allow all technical first-responders to understand their roles in the event of a disaster

Provide step by step plans to recover business processes in the event of a disaster

Assign responsibilities to the technical teams responsible for the recovery of all data.

Questions # 9:

Which of the following functions MUST your Information Security Governance program include for formal organizational reporting?

Options:

Audit and Legal

Budget and Compliance

Human Resources and Budget

Legal and Human Resources

Questions # 10:

Which of the following represents the HIGHEST negative impact resulting from an ineffective security governance program?

Options:

Reduction of budget

Decreased security awareness

Improper use of information resources

Fines for regulatory non-compliance

Viewing page 1 out of 13 pages

Viewing questions 1-10 out of questions

Weekend Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple70

Pass the ECCouncil EISM 512-50 Questions and answers with ExamsMirror

Exam 512-50 Premium Access

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

TOP CODES