Free 512-50 Exam Braindumps
Information Security Manager Questions 186–190 (page: 39)

Updated On: 10-Feb-2026

A stakeholder is a person or group:

  1. Vested in the success and/or failure of a project or initiative regardless of budget implications.
  2. Vested in the success and/or failure of a project or initiative and is tied to the project budget.
  3. That has budget authority.
  4. That will ultimately use the system.

Answer(s): A



Your company has a "no right to privacy" notice on all logon screens for your information systems and users sign an Acceptable Use Policy informing them of this condition. A peer group member and friend comes to you and requests access to one of her employee's email account.
What should you do? (choose the BEST answer):

  1. Grant her access, the employee has been adequately warned through the AUP.
  2. Assist her with the request, but only after her supervisor signs off on the action.
  3. Reset the employee's password and give it to the supervisor.
  4. Deny the request citing national privacy laws.

Answer(s): B



Acme Inc. has engaged a third party vendor to provide 99.999% up-time for their online web presence and had them contractually agree to this service level agreement.
What type of risk tolerance is Acme exhibiting? (choose the BEST answer):

  1. low risk-tolerance
  2. high risk-tolerance
  3. moderate risk-tolerance
  4. medium-high risk-tolerance

Answer(s): A



The security team has investigated the theft/loss of several unencrypted laptop computers containing sensitive corporate information. To prevent the loss of any additional corporate data it is unilaterally decided by the CISO that all existing and future laptop computers will be encrypted. Soon, the help desk is flooded with complaints about the slow performance of the laptops and users are upset.
What did the CISO do wrong? (choose the BEST answer):

  1. Failed to identify all stakeholders and their needs
  2. Deployed the encryption solution in an inadequate manner
  3. Used 1024 bit encryption when 256 bit would have sufficed
  4. Used hardware encryption instead of software encryption

Answer(s): A



When gathering security requirements for an automated business process improvement program, which of the following is MOST important?

  1. Type of data contained in the process/system
  2. Type of connection/protocol used to transfer the data
  3. Type of encryption required for the data once it is at rest
  4. Type of computer the data is processed on

Answer(s): A



Viewing page 39 of 82
Viewing questions 191 - 195 out of 404 questions


Post your Comments and Discuss EC-Council 512-50 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!