QUESTION: 141 Exam Topic: 2, Information Security Controls and Audit Management

Many times a CISO may have to speak to the Board of Directors (BOD) about their cyber security posture.
What would be the BEST choice of security metrics to present to the BOD?

All vulnerabilities found on servers and desktops
Only critical and high vulnerabilities on servers and desktops
Only critical and high vulnerabilities that impact important production servers
All vulnerabilities that impact important production servers

Answer(s): C

Reveal Solution Next Question

QUESTION: 142 Exam Topic: 2, Information Security Controls and Audit Management

When a critical vulnerability has been discovered on production systems and needs to be fixed immediately, what is the BEST approach for a CISO to mitigate the vulnerability under tight budget constraints?

Transfer financial resources from other critical programs
Take the system off line until the budget is available
Deploy countermeasures and compensating controls until the budget is available
Schedule an emergency meeting and request the funding to fix the issue

Answer(s): C

Reveal Solution Next Question

QUESTION: 143 Exam Topic: 2, Information Security Controls and Audit Management

An information security department is required to remediate system vulnerabilities when they are discovered. Please select the three primary remediation methods that can be used on an affected system.

Install software patch, Operate system, Maintain system
Discover software, Remove affected software, Apply software patch
Install software patch, configuration adjustment, Software Removal
Software removal, install software patch, maintain system

Answer(s): C

Reveal Solution Next Question

QUESTION: 144 Exam Topic: 2, Information Security Controls and Audit Management

When a CISO considers delaying or not remediating system vulnerabilities which of the following are MOST important to take into account?

Threat Level, Risk of Compromise, and Consequences of Compromise
Risk Avoidance, Threat Level, and Consequences of Compromise
Risk Transfer, Reputational Impact, and Consequences of Compromise
Reputational Impact, Financial Impact, and Risk of Compromise

Answer(s): A

Reveal Solution Next Question

Free 512-50 Exam Braindumps (page: 37)

QUESTION: 141 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 142 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 143 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 144 Exam Topic: 2, Information Security Controls and Audit Management

512-50 Discussions & Posts