Free 512-50 Exam braindumps download (512-50 exam dumps Free)

QUESTION: 166 Exam Topic: 2, Information Security Controls and Audit Management

The MOST common method to get an unbiased measurement of the effectiveness of an Information Security Management System (ISMS) is to

assign the responsibility to the information security team.
assign the responsibility to the team responsible for the management of the controls.
create operational reports on the effectiveness of the controls.
perform an independent audit of the security controls.

Answer(s): D

Show Answer Next Question

QUESTION: 167 Exam Topic: 2, Information Security Controls and Audit Management

The effectiveness of social engineering penetration testing using phishing can be used as a Key Performance Indicator (KPI) for the effectiveness of an organization's

Risk Management Program.
Anti-Spam controls.
Security Awareness Program.
Identity and Access Management Program.

Answer(s): C

Show Answer Next Question

QUESTION: 168 Exam Topic: 2, Information Security Controls and Audit Management

Which of the following is the MOST important reason to measure the effectiveness of an Information Security Management System (ISMS)?

Meet regulatory compliance requirements
Better understand the threats and vulnerabilities affecting the environment
Better understand strengths and weaknesses of the program
Meet legal requirements

Answer(s): C

Show Answer Next Question

QUESTION: 169 Exam Topic: 2, Information Security Controls and Audit Management

The mean time to patch, number of virus outbreaks prevented, and number of vulnerabilities mitigated are examples of what type of performance metrics?

Risk metrics
Management metrics
Operational metrics
Compliance metrics

Answer(s): C

Show Answer Next Question

QUESTION: 170 Exam Topic: 2, Information Security Controls and Audit Management

When you develop your audit remediation plan what is the MOST important criteria?

To remediate half of the findings before the next audit.
To remediate all of the findings before the next audit.
To validate that the cost of the remediation is less than the risk of the finding.
To validate the remediation process with the auditor.

Answer(s): C

Show Answer Next Question

Free 512-50 Exam Braindumps Information Security Manager Questions 166–170 (page: 35)

QUESTION: 166 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 167 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 168 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 169 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 170 Exam Topic: 2, Information Security Controls and Audit Management

Free 512-50 Exam Braindumps
Information Security Manager Questions 166–170 (page: 35)