Free 512-50 Exam braindumps download (512-50 exam dumps Free)

QUESTION: 161 Exam Topic: 2, Information Security Controls and Audit Management

Which of the following activities must be completed BEFORE you can calculate risk?

Determining the likelihood that vulnerable systems will be attacked by specific threats
Calculating the risks to which assets are exposed in their current setting
Assigning a value to each information asset
Assessing the relative risk facing the organization's information assets

Answer(s): C

QUESTION: 162 Exam Topic: 2, Information Security Controls and Audit Management

Step-by-step procedures to regain normalcy in the event of a major earthquake is PRIMARILY covered by which of the following plans?

Incident response plan
Business Continuity plan
Disaster recovery plan
Damage control plan

Answer(s): C

Show Answer Next Question

QUESTION: 163 Exam Topic: 2, Information Security Controls and Audit Management

Which International Organization for Standardization (ISO) below BEST describes the performance of risk management, and includes a five-stage risk management methodology.

ISO 27001
ISO 27002
ISO 27004
ISO 27005

Answer(s): D

Show Answer Next Question

QUESTION: 164 Exam Topic: 2, Information Security Controls and Audit Management

Which of the following BEST describes an international standard framework that is based on the security model Information Technology--Code of Practice for Information Security Management?