The CIO of an organization has decided to assign the responsibility of internal IT audit to the IT team.This is consider a bad practice MAINLY because

This represents a conflict of interest

The IT team is not familiar in IT audit practices

This represents a bad implementation of the Least Privilege principle

This represents a conflict of interest

The IT team is not certified to perform audits

An organization has implemented a change management process for all changes to the IT production environment. This change management process follows best practices and is expected to help stabilize the availability and integrity of the organization's IT environment. Which of the following can be used to measure the effectiveness of this newly implemented process:

Number of change orders rejected

Number and length of planned outages

Number of change orders processed

Which of the following is the MOST effective way to measure the effectiveness of security controls on a perimeter network?

External penetration testing by a qualified third party

Perform a vulnerability scan of the network

External penetration testing by a qualified third party

Internal Firewall ruleset reviews

Implement network intrusion prevention systems

A recent audit has identified a few control exceptions and is recommending the implementation of technology and processes to address the finding. Which of the following is the MOST likely reason for the organization to reject the implementation of the recommended technology and processes?

The risk tolerance of the organization permits this risk

The auditors have not followed proper auditing processes

The CIO of the organization disagrees with the finding

The risk tolerance of the organization permits this risk

The organization has purchased cyber insurance

The remediation of a specific audit finding is deemed too expensive and will not be implemented.Which of the following is a TRUE statement?

The asset being protected is less valuable than the remediation costs

The asset is more expensive than the remediation

The asset being protected is less valuable than the remediation costs

The remediation costs are irrelevant; it must be implemented regardless of cost.

A missing/ineffective security control is identified. Which of the following should be the NEXT step?

Perform a risk assessment to measure risk

Perform an audit to measure the control formally

Escalate the issue to the IT organization

Perform a risk assessment to measure risk

At which point should the identity access management team be notified of the termination of an employee?

Immediately so the employee account(s) can be disabled

At the end of the day once the employee is off site

During the monthly review cycle

Immediately so the employee account(s) can be disabled

Which represents PROPER separation of duties in the corporate environment?

Information Security and Network teams perform two distinct functions

Information Security and Identity Access Management teams perform two distinct functions

Developers and Network teams both have admin rights on servers

Finance has access to Human Resources data

Information Security and Network teams perform two distinct functions

Creating good security metrics is essential for a CISO. What would be the BEST sources for creating security metrics for baseline defenses coverage?

Firewall, anti-virus console, IDS, syslog

Servers, routers, switches, modem

Firewall, exchange, web server, intrusion detection system (IDS)

Firewall, anti-virus console, IDS, syslog

Many times a CISO may have to speak to the Board of Directors (BOD) about their cyber security posture. What would be the BEST choice of security metrics to present to the BOD?

Only critical and high vulnerabilities that impact important production servers

All vulnerabilities found on servers and desktops

Only critical and high vulnerabilities on servers and desktops

Only critical and high vulnerabilities that impact important production servers

All vulnerabilities that impact important production servers

When a critical vulnerability has been discovered on production systems and needs to be fixed immediately, what is the BEST approach for a CISO to mitigate the vulnerability under tight budget constraints?

Deploy countermeasures and compensating controls until the budget is available

Transfer financial resources from other critical programs

Take the system off line until the budget is available

Deploy countermeasures and compensating controls until the budget is available

Schedule an emergency meeting and request the funding to fix the issue

An information security department is required to remediate system vulnerabilities when they are discovered. Please select the three primary remediation methods that can be used on an affected system.

Install software patch, configuration adjustment, Software Removal

Install software patch, Operate system, Maintain system

Discover software, Remove affected software, Apply software patch

Install software patch, configuration adjustment, Software Removal

Software removal, install software patch, maintain system

When a CISO considers delaying or not remediating system vulnerabilities which of the following are MOST important to take into account?

Threat Level, Risk of Compromise, and Consequences of Compromise

Risk Avoidance, Threat Level, and Consequences of Compromise

Risk Transfer, Reputational Impact, and Consequences of Compromise

Reputational Impact, Financial Impact, and Risk of Compromise

The effectiveness of an audit is measured by?

How the recommendations directly support the goals of the company

The number of actionable items in the recommendations

How it exposes the risk tolerance of the company

How the recommendations directly support the goals of the company

The number of security controls the company has in use

A new CISO just started with a company and on the CISO's desk is the last complete Information Security Management audit report. The audit report is over two years old. After reading it, what should be the CISO's FIRST priority?

Review the recommendations and follow up to see if audit implemented the changes

Have internal audit conduct another audit to see what has changed.

Contract with an external audit company to conduct an unbiased audit

Review the recommendations and follow up to see if audit implemented the changes

Meet with audit team to determine a timeline for corrections

You have implemented the new controls. What is the next step?

Monitor the effectiveness of the controls

Document the process for the stakeholders

Monitor the effectiveness of the controls

Update the audit findings report

An audit was conducted and many critical applications were found to have no disaster recovery plans in place. You conduct a Business Impact Analysis (BIA) to determine impact to the company for each application. What should be theNEXT step?

Create technology recovery plans

Determine the annual loss expectancy (ALE)

Create a crisis management plan

Create technology recovery plans

Which of the following is considered to be an IT governance framework and a supporting toolset that allows for managers to bridge the gap between control requirements, technical issues, and business risks?

Control Objective for Information Technology (COBIT)

Committee of Sponsoring Organizations (COSO)

Information Technology Infrastructure Library (ITIL)

Which of the following set of processes is considered to be one of the cornerstone cycles of the International Organization for Standardization (ISO) 27001 standard?

SCORE (Security Consensus Operational Readiness Evaluation)

Which of the following best describes the purpose of the International Organization for Standardization (ISO) 27002 standard?

To established guidelines and general principles for initiating, implementing, maintaining, and improving information security management within an organization

To give information security management recommendations to those who are responsible for initiating, implementing, or maintaining security in their organization.

To provide a common basis for developing organizational security standards

To provide effective security management practice and to provide confidence in interorganizational dealings

To established guidelines and general principles for initiating, implementing, maintaining, and improving information security management within an organization

Which of the following illustrates an operational control process:

Installing an appropriate fire suppression system in the data center

Classifying an information system as part of a risk assessment

Installing an appropriate fire suppression system in the data center

Conducting an audit of the configuration management process

Establishing procurement standards for cloud vendors

With respect to the audit management process, management response serves what function?

determining whether or not resources will be allocated to remediate a finding

placing underperforming units on notice for failing to meet standards

determining whether or not resources will be allocated to remediate a finding

adding controls to ensure that proper oversight is achieved by management

revealing the "root cause" of the process failure and mitigating for all internal and external units

Which of the following are primary concerns for management with regard to assessing internal control objectives?

Compliance, Effectiveness, Efficiency

Confidentiality, Availability, Integrity

Compliance, Effectiveness, Efficiency

Communication, Reliability, Cost

Confidentiality, Compliance, Cost

Which of the following are necessary to formulate responses to external audit findings?

Technical Staff, Budget Authority, Management

Internal Audit, Management, and Technical Staff

Internal Audit, Budget Authority, Management

Technical Staff, Budget Authority, Management

Technical Staff, Internal Audit, Budget Authority

The executive board has requested that the CISO of an organization define and Key Performance Indicators (KPI) to measure the effectiveness of the security awareness program provided to call center employees. Which of the following can be used as a KPI?

Number of successful social engineering attempts on the call center

Number of callers who report security issues.

Number of callers who report a lack of customer service from the call center

Number of successful social engineering attempts on the call center

Number of callers who abandon the call before speaking with a representative

Creating a secondary authentication process for network access would be an example of?

Nonlinearities in physical security performance metrics

Defense in depth cost enumerated costs

System hardening and patching requirements

Which of the following activities is the MAIN purpose of the risk assessment process?

Calculating the risks to which assets are exposed in their current setting

Creating an inventory of information assets

Classifying and organizing information assets into meaningful groups

Assigning value to each information asset

Calculating the risks to which assets are exposed in their current setting

Which of the following activities must be completed BEFORE you can calculate risk?

Assigning a value to each information asset

Determining the likelihood that vulnerable systems will be attacked by specific threats

Calculating the risks to which assets are exposed in their current setting

Assigning a value to each information asset

Assessing the relative risk facing the organization's information assets

ECCouncil 712-50 Practice Test 4 - Free Online Exam Prep & Questions

Assigning the role and responsibility of Information Assurance to a dedicated and independent security group is an example of:

Detective Controls

Proactive Controls

Preemptive Controls

Organizational Controls

Comment (0)

ECCouncil 712-50 Practice Test 4

Question

ECCouncil 712-50 Practice Tests

Practice Tests