Free 512-50 Exam Braindumps
Information Security Manager Questions 141–145 (page: 30)

Updated On: 10-Feb-2026

Many times a CISO may have to speak to the Board of Directors (BOD) about their cyber security posture.
What would be the BEST choice of security metrics to present to the BOD?

  1. All vulnerabilities found on servers and desktops
  2. Only critical and high vulnerabilities on servers and desktops
  3. Only critical and high vulnerabilities that impact important production servers
  4. All vulnerabilities that impact important production servers

Answer(s): C



When a critical vulnerability has been discovered on production systems and needs to be fixed immediately, what is the BEST approach for a CISO to mitigate the vulnerability under tight budget constraints?

  1. Transfer financial resources from other critical programs
  2. Take the system off line until the budget is available
  3. Deploy countermeasures and compensating controls until the budget is available
  4. Schedule an emergency meeting and request the funding to fix the issue

Answer(s): C



An information security department is required to remediate system vulnerabilities when they are discovered. Please select the three primary remediation methods that can be used on an affected system.

  1. Install software patch, Operate system, Maintain system
  2. Discover software, Remove affected software, Apply software patch
  3. Install software patch, configuration adjustment, Software Removal
  4. Software removal, install software patch, maintain system

Answer(s): C



When a CISO considers delaying or not remediating system vulnerabilities which of the following are MOST important to take into account?

  1. Threat Level, Risk of Compromise, and Consequences of Compromise
  2. Risk Avoidance, Threat Level, and Consequences of Compromise
  3. Risk Transfer, Reputational Impact, and Consequences of Compromise
  4. Reputational Impact, Financial Impact, and Risk of Compromise

Answer(s): A



The effectiveness of an audit is measured by?

  1. The number of actionable items in the recommendations
  2. How it exposes the risk tolerance of the company
  3. How the recommendations directly support the goals of the company
  4. The number of security controls the company has in use

Answer(s): C



Viewing page 30 of 82
Viewing questions 146 - 150 out of 404 questions


Post your Comments and Discuss EC-Council 512-50 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!