Free 512-50 Exam braindumps download (512-50 exam dumps Free)

QUESTION: 126 Exam Topic: 2, Information Security Controls and Audit Management

An organization has implemented a change management process for all changes to the IT production environment. This change management process follows best practices and is expected to help stabilize the availability and integrity of the organization's IT environment.
Which of the following can be used to measure the effectiveness of this newly implemented process:

Number of change orders rejected
Number and length of planned outages
Number of unplanned outages
Number of change orders processed

Answer(s): C

Show Answer Next Question

QUESTION: 127 Exam Topic: 2, Information Security Controls and Audit Management

Which of the following is the MOST effective way to measure the effectiveness of security controls on a perimeter network?

Perform a vulnerability scan of the network
External penetration testing by a qualified third party
Internal Firewall ruleset reviews
Implement network intrusion prevention systems

Answer(s): B

Show Answer Next Question

QUESTION: 128 Exam Topic: 2, Information Security Controls and Audit Management

Which of the following organizations is typically in charge of validating the implementation and effectiveness of security controls?

Security Administrators
Internal/External Audit
Risk Management
Security Operations

Answer(s): B

Show Answer Next Question

QUESTION: 129 Exam Topic: 2, Information Security Controls and Audit Management

A recent audit has identified a few control exceptions and is recommending the implementation of technology and processes to address the finding.
Which of the following is the MOST likely reason for the organization to reject the implementation of the recommended technology and processes?

The auditors have not followed proper auditing processes
The CIO of the organization disagrees with the finding
The risk tolerance of the organization permits this risk
The organization has purchased cyber insurance

Answer(s): C

Show Answer Next Question

QUESTION: 130 Exam Topic: 2, Information Security Controls and Audit Management

The remediation of a specific audit finding is deemed too expensive and will not be implemented.
Which of the following is a TRUE statement?

The asset is more expensive than the remediation
The audit finding is incorrect
The asset being protected is less valuable than the remediation costs
The remediation costs are irrelevant; it must be implemented regardless of cost.

Answer(s): C

Show Answer Next Question

Free 512-50 Exam Braindumps Information Security Manager Questions 126–130 (page: 27)

QUESTION: 126 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 127 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 128 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 129 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 130 Exam Topic: 2, Information Security Controls and Audit Management

Free 512-50 Exam Braindumps
Information Security Manager Questions 126–130 (page: 27)