Free 512-50 Exam braindumps download (512-50 exam dumps Free)

What is the BEST way to achieve on-going compliance monitoring in an organization?

Only check compliance right before the auditors are scheduled to arrive onsite.
Outsource compliance to a 3rd party vendor and let them manage the program.
Have Compliance and Information Security partner to correct issues as they arise.
Have Compliance direct Information Security to fix issues after the auditors report.

Answer(s): C

Which of the following is the MOST important for a CISO to understand when identifying threats?

How vulnerabilities can potentially be exploited in systems that impact the organization
How the security operations team will behave to reported incidents
How the firewall and other security devices are configured to prevent attacks
How the incident management team prepares to handle an attack

Answer(s): A

Which of the following are the MOST important factors for proactively determining system vulnerabilities?

Answer(s): D

What role should the CISO play in properly scoping a PCI environment?

Validate the business units' suggestions as to what should be included in the scoping process
Work with a Qualified Security Assessor (QSA) to determine the scope of the PCI environment
Ensure internal scope validation is completed and that an assessment has been done to discover all credit card data
Complete the self-assessment questionnaire and work with an Approved Scanning Vendor (ASV) to determine scope

Answer(s): C