Home / ECCouncil / 712-50

ECCouncil 712-50 Practice Test - Questions Answers, Page 7

Question list

List of questions

Question 61

(0)

A global health insurance company is concerned about protecting confidential information. Which of the following is of MOST concern to this organization?

Question 62

(0)

In which of the following cases, would an organization be more prone to risk acceptance vs. risk mitigation?

Question 63

(0)

The exposure factor of a threat to your organization is defined by?

Question 64

(0)

Risk is defined as:

Question 65

(0)

What two methods are used to assess risk impact?

Question 66

(0)

According to ISO 27001, of the steps for establishing an Information Security Governance program listed below, which comes first?

Question 67

(0)

You have recently drafted a revised information security policy. From whom should you seek endorsement in order to have the GREATEST chance for adoption and implementation throughout the entire orga

Question 68

(0)

The success of the Chief Information Security Officer is MOST dependent upon:

Question 69

(0)

An organization information security policy serves to

Question 70

(0)

Information security policies should be reviewed:

Question 61

A global health insurance company is concerned about protecting confidential information. Which of the following is of MOST concern to this organization?

Compliance to the Payment Card Industry (PCI) regulations.

Alignment with financial reporting regulations for each country where they operate.

Alignment with International Organization for Standardization (ISO) standards.

Compliance with patient data protection regulations for each country where they operate.

Show Answer Comment (0)

Question 62

In which of the following cases, would an organization be more prone to risk acceptance vs. risk mitigation?

The organization uses exclusively a quantitative process to measure risk

The organization uses exclusively a qualitative process to measure risk

The organization's risk tolerance is high

The organization's risk tolerance is lo

Show Answer Comment (0)

Question 63

The exposure factor of a threat to your organization is defined by?

Asset value times exposure factor

Annual rate of occurrence

Annual loss expectancy minus current cost of controls

Percentage of loss experienced due to a realized threat event

Show Answer Comment (0)

Question 64

Risk is defined as:

Threat times vulnerability divided by control

Advisory plus capability plus vulnerability

Asset loss times likelihood of event

Quantitative plus qualitative impact

Show Answer Comment (0)

Question 65

What two methods are used to assess risk impact?

Cost and annual rate of expectance

Subjective and Objective

Qualitative and percent of loss realized

Quantitative and qualitative

Show Answer Comment (0)

Question 66

According to ISO 27001, of the steps for establishing an Information Security Governance program listed below, which comes first?

Identify threats, risks, impacts and vulnerabilities

Decide how to manage risk

Define the budget of the Information Security Management System

Define Information Security Policy

Show Answer Comment (0)

You have recently drafted a revised information security policy. From whom should you seek endorsement in order to have the GREATEST chance for adoption and implementation throughout the entire organization?

Chief Information Security Officer

Chief Executive Officer

Chief Information Officer

Chief Legal Counsel

Show Answer Comment (0)