Free 512-50 Exam Braindumps
Information Security Manager Questions 131–135 (page: 28)

Updated On: 10-Feb-2026

A missing/ineffective security control is identified.
Which of the following should be the NEXT step?

  1. Perform an audit to measure the control formally
  2. Escalate the issue to the IT organization
  3. Perform a risk assessment to measure risk
  4. Establish Key Risk Indicators

Answer(s): C



The risk found after a control has been fully implemented is called:

  1. Residual Risk
  2. Total Risk
  3. Post implementation risk
  4. Transferred risk

Answer(s): A



In MOST organizations which group periodically reviews network intrusion detection system logs for all systems as part of their daily tasks?

  1. Internal Audit
  2. Database Administration
  3. Information Security
  4. Compliance

Answer(s): C



At which point should the identity access management team be notified of the termination of an employee?

  1. At the end of the day once the employee is off site
  2. During the monthly review cycle
  3. Immediately so the employee account(s) can be disabled
  4. Before an audit

Answer(s): C



To have accurate and effective information security policies how often should the CISO review the organization policies?

  1. Every 6 months
  2. Quarterly
  3. Before an audit
  4. At least once a year

Answer(s): D



Viewing page 28 of 82
Viewing questions 136 - 140 out of 404 questions


Post your Comments and Discuss EC-Council 512-50 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!