Free 512-50 Exam braindumps download (512-50 exam dumps Free)

QUESTION: 151 Exam Topic: 2, Information Security Controls and Audit Management

Which of the following best describes the purpose of the International Organization for Standardization (ISO) 27002 standard?

To give information security management recommendations to those who are responsible for initiating, implementing, or maintaining security in their organization.
To provide a common basis for developing organizational security standards
To provide effective security management practice and to provide confidence in inter- organizational dealings
To established guidelines and general principles for initiating, implementing, maintaining, and improving information security management within an organization

Answer(s): D

Show Answer Next Question

QUESTION: 152 Exam Topic: 2, Information Security Controls and Audit Management

Providing oversight of a comprehensive information security program for the entire organization is the primary responsibility of which group under the InfoSec governance framework?

Senior Executives
Office of the Auditor
Office of the General Counsel
All employees and users

Answer(s): A

Show Answer Next Question

QUESTION: 153 Exam Topic: 2, Information Security Controls and Audit Management

An employee successfully avoids becoming a victim of a sophisticated spear phishing attack due to knowledge gained through the corporate information security awareness program.
What type of control has been effectively utilized?

Management Control
Technical Control
Training Control
Operational Control

Answer(s): D

Show Answer Next Question

QUESTION: 154 Exam Topic: 2, Information Security Controls and Audit Management

Which of the following illustrates an operational control process:

Classifying an information system as part of a risk assessment
Installing an appropriate fire suppression system in the data center
Conducting an audit of the configuration management process
Establishing procurement standards for cloud vendors

Answer(s): B

Show Answer Next Question

QUESTION: 155 Exam Topic: 2, Information Security Controls and Audit Management

With respect to the audit management process, management response serves what function?

placing underperforming units on notice for failing to meet standards
determining whether or not resources will be allocated to remediate a finding
adding controls to ensure that proper oversight is achieved by management
revealing the "root cause" of the process failure and mitigating for all internal and external units

Answer(s): B

Show Answer Next Question

Free 512-50 Exam Braindumps Information Security Manager Questions 151–155 (page: 32)

QUESTION: 151 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 152 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 153 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 154 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 155 Exam Topic: 2, Information Security Controls and Audit Management

Free 512-50 Exam Braindumps
Information Security Manager Questions 151–155 (page: 32)