Free 512-50 Exam braindumps download (512-50 exam dumps Free)

QUESTION: 121 Exam Topic: 2, Information Security Controls and Audit Management

As the new CISO at the company you are reviewing the audit reporting process and notice that it includes only detailed technical diagrams.
What else should be in the reporting process?

Executive summary
Penetration test agreement
Names and phone numbers of those who conducted the audit
Business charter

Answer(s): A

Show Answer Next Question

QUESTION: 122 Exam Topic: 2, Information Security Controls and Audit Management

As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building. Below your office window you notice a door that is normally propped open during the day for groups of people to take breaks outside. Upon looking closer you see there is no badge reader.
What should you do?

Nothing, this falls outside your area of influence.
Close and chain the door shut and send a company-wide memo banning the practice.
Have a risk assessment performed.
Post a guard at the door to maintain physical security

Answer(s): C

Show Answer Next Question

QUESTION: 123 Exam Topic: 2, Information Security Controls and Audit Management

Assigning the role and responsibility of Information Assurance to a dedicated and independent security group is an example of:

Detective Controls
Proactive Controls
Preemptive Controls
Organizational Controls

Answer(s): D

Show Answer Next Question

QUESTION: 124 Exam Topic: 2, Information Security Controls and Audit Management

The CIO of an organization has decided to assign the responsibility of internal IT audit to the IT team.
This is consider a bad practice MAINLY because