QUESTION: 173 Exam Topic: 2, Information Security Controls and Audit Management

Which of the following represents the BEST reason for an organization to use the Control Objectives for Information and Related Technology (COBIT) as an Information Technology (IT) framework?

It allows executives to more effectively monitor IT implementation costs
Implementation of it eases an organization's auditing and compliance burden
Information Security (IS) procedures often require augmentation with other standards
It provides for a consistent and repeatable staffing model for technology organizations

Answer(s): B

Reveal Solution Next Question

QUESTION: 174 Exam Topic: 2, Information Security Controls and Audit Management

You are the Chief Information Security Officer of a large, multinational bank and you suspect there is a flaw in a two factor authentication token management process.
Which of the following represents your BEST course of action?

Validate that security awareness program content includes information about the potential vulnerability
Conduct a thorough risk assessment against the current implementation to determine system functions
Determine program ownership to implement compensating controls
Send a report to executive peers and business unit owners detailing your suspicions

Answer(s): B

Reveal Solution Next Question

QUESTION: 175 Exam Topic: 2, Information Security Controls and Audit Management

Who is responsible for verifying that audit directives are implemented?

IT Management
Internal Audit
IT Security
BOD Audit Committee

Answer(s): B

Reference:

https://www.eccouncil.org/information-security-management/

Reveal Solution Next Question

QUESTION: 176 Exam Topic: 3, Security Program Management and Operations

A person in your security team calls you at night and informs you that one of your web applications is potentially under attack from a cross-site scripting vulnerability.
What do you do?

tell him to shut down the server
tell him to call the police
tell him to invoke the incident response process
tell him to analyze the problem, preserve the evidence and provide a full analysis and report

Answer(s): C

Reveal Solution Next Question

Free 512-50 Exam Braindumps (page: 45)

QUESTION: 173 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 174 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 175 Exam Topic: 2, Information Security Controls and Audit Management

Reference:

QUESTION: 176 Exam Topic: 3, Security Program Management and Operations

512-50 Discussions & Posts