ECCouncil 712-50 Practice Test - Questions Answers, Page 19

As the CISO for your company you are accountable for the protection of information resources commensurate with:

A stakeholder is a person or group:

Your company has a "no right to privacy" notice on all logon screens for your information systems and users sign an Acceptable Use Policy informing them of this condition. A peer group member and friend comes to you and requests access to one of her employee's email account. What should you do? (choose the BEST answer):

Acme Inc. has engaged a third party vendor to provide 99.999% up-time for their online web presence and had them contractually agree to this service level agreement. What type of risk tolerance is Acme exhibiting? (choose the BEST answer):

The security team has investigated the theft/loss of several unencrypted laptop computers containing sensitive corporate information. To prevent the loss of any additional corporate data it is unilaterally decided by the CISO that all existing and future laptop computers will be encrypted.

Soon, the help desk is flooded with complaints about the slow performance of the laptops and users are upset. What did the CISO do wrong? (choose the BEST answer):

When gathering security requirements for an automated business process improvement program, which of the following is MOST important?

When selecting a security solution with reoccurring maintenance costs after the first year, the CISO should: (choose the BEST answer)

Which of the following information may be found in table top exercises for incident response?

Your incident response plan should include which of the following?