Study HIGH Quality 512-50 Free Study Guides and Exams Tutorials [Q13-Q29]

Q13. As the CISO, you have been tasked with the execution of the company’s key management program. You MUST ensure the integrity of encryption keys at the point of generation. Which principal of encryption key control will ensure no single individual can constitute or re-constitute a key?

Q14. Information Security is often considered an excessive, after-the-fact cost when a project or initiative is completed. What can be done to ensure that security is addressed cost effectively?

Q15. The BEST organization to provide a comprehensive, independent and certifiable perspective on established security controls in an environment is

Q16. The process of creating a system which divides documents based on their security level to manage access to private data is known as

Q17. Which of the following methodologies references the recommended industry standard that Information security project managers should follow?

Q18. When you develop your audit remediation plan what is the MOST important criteria?

Q19. Which of the following represents the best method of ensuring business unit alignment with security program requirements?

Q20. During the last decade, what trend has caused the MOST serious issues in relation to physical security?

Q21. When selecting a security solution with reoccurring maintenance costs after the first year (choose the BEST answer):

Q22. Which International Organization for Standardization (ISO) below BEST describes the performance of risk management, and includes a five-stage risk management methodology.

Q23. As the Risk Manager of an organization, you are task with managing vendor risk assessments. During the assessment, you identified that the vendor is engaged with high profiled clients, and bad publicity can jeopardize your own brand.
Which is the BEST type of risk that defines this event?

Q24. Dataflow diagrams are used by IT auditors to:

Q25. A stakeholder is a person or group:

Q26. Scenario: As you begin to develop the program for your organization, you assess the corporate culture and determine that there is a pervasive opinion that the security program only slows things down and limits the performance of the “real workers.” Which group of people should be consulted when developing your security program?

Q27. The total cost of security controls should:

Q28. When gathering security requirements for an automated business process improvement program, which of the following is MOST important?

Q29. Knowing the potential financial loss an organization is willing to suffer if a system fails is a determination of which of the following?