QUESTION: 53

What is the definition of Risk in Information Security?

Risk = Probability x Impact
Risk = Impact x Threat
Risk = Threat x Probability
Risk = Financial Impact x Probability

Answer(s): A

A business unit within your organization intends to deploy a new technology in a manner that places it in violation of existing information security standards.

What immediate action should the information security manager take?

Enforce the existing security standards and do not allow the deployment of the new technology.
If the risks associated with that technology are not already identified, perform a risk analysis to quantify the risk, and allow the business unit to proceed based on the identified risk level.
Amend the standard to permit the deployment.
Permit a 90-day window to see if an issue occurs and then amend the standard if there are no issues.

Answer(s): B

Show Answer Next Question

QUESTION: 55

The establishment of a formal risk management framework and system authorization program is essential. The LAST step of the system authorization process is:

Getting authority to operate the system from executive management
Contacting the Internet Service Provider for an IP scope
Changing the default passwords
Conducting a final scan of the live system and mitigating all high and medium level vulnerabilities

Answer(s): A

Show Answer Next Question

QUESTION: 56

An organization’s firewall technology needs replaced. A specific technology has been selected that is less costly than others and lacking in some important capabilities. The security officer has voiced concerns about sensitivedata breaches but the decision is made to purchase. What does this selection indicate?

A high threat environment
A low vulnerability environment
A high risk tolerance environment
A low risk tolerance environment

Answer(s): C

Show Answer Next Question

Free EC-Council 712-50 Exam Questions (page: 15)

QUESTION: 53

QUESTION: 54

QUESTION: 55

QUESTION: 56

712-50 Exam Discussions & Posts