Free 512-50 Exam braindumps download (512-50 exam dumps Free)

QUESTION: 171 Exam Topic: 2, Information Security Controls and Audit Management

Control Objectives for Information and Related Technology (COBIT) is which of the following?

An Information Security audit standard
An audit guideline for certifying secure systems and controls
A framework for Information Technology management and governance
A set of international regulations for Information Technology governance

Answer(s): C

QUESTION: 172 Exam Topic: 2, Information Security Controls and Audit Management

A Chief Information Security Officer received a list of high, medium, and low impact audit findings.
Which of the following represents the BEST course of action?

If the findings impact regulatory compliance, try to apply remediation that will address the most findings for the least cost.
If the findings do not impact regulatory compliance, remediate only the high and medium risk findings.
If the findings impact regulatory compliance, remediate the high findings as quickly as possible.
If the findings do not impact regulatory compliance, review current security controls.

Answer(s): C

Show Answer Next Question

QUESTION: 173 Exam Topic: 2, Information Security Controls and Audit Management

Which of the following represents the BEST reason for an organization to use the Control Objectives for Information and Related Technology (COBIT) as an Information Technology (IT) framework?

It allows executives to more effectively monitor IT implementation costs
Implementation of it eases an organization's auditing and compliance burden
Information Security (IS) procedures often require augmentation with other standards
It provides for a consistent and repeatable staffing model for technology organizations

Answer(s): B

Show Answer Next Question

QUESTION: 174 Exam Topic: 2, Information Security Controls and Audit Management

You are the Chief Information Security Officer of a large, multinational bank and you suspect there is a flaw in a two factor authentication token management process.
Which of the following represents your BEST course of action?

Validate that security awareness program content includes information about the potential vulnerability
Conduct a thorough risk assessment against the current implementation to determine system functions
Determine program ownership to implement compensating controls
Send a report to executive peers and business unit owners detailing your suspicions

Answer(s): B

Show Answer Next Question