Free 712-50 Exam braindumps download (712-50 exam dumps Free)

QUESTION: 191

The organization does not have the time to remediate the vulnerability; however it is critical to release the application.

Which of the following needs to be further evaluated to help mitigate the risks?

Provide security testing tools
Provide developer security training
Deploy Intrusion Detection Systems
Implement Compensating Controls

Answer(s): D

Show Answer Next Question

QUESTION: 192

Your company has a “no right to privacy” notice on all logon screens for your information systems and users sign an Acceptable Use Policy informing them of this condition. A peer group member and friend comes to you and requests access to one of her employee’s email account.

What should you do?

Deny the request citing national privacy laws
None
Grant her access, the employee has been adequately warned through the AUP.
Assist her with the request, but only after her supervisor signs off on the action.
Reset the employee’s password and give it to the supervisor.

Answer(s): D

Show Answer Next Question

QUESTION: 193

Which one of the following BEST describes which member of the management team is accountable for the day-to-day operation of the information security program?

Security managers
Security analysts
Security technicians
Security administrators

Answer(s): A

Show Answer Next Question

QUESTION: 194

Which of the following is a major benefit of applying risk levels?

Resources are not wasted on risks that are already managed to an acceptable level
Risk appetite increase within the organization once the levels are understood
Risk budgets are more easily managed due to fewer due to fewer identified risks as a result of using a methodology
Risk management governance becomes easier since most risks remain low once mitigated

Answer(s): A

Show Answer Next Question