712-50 practice test

1. Question 1 · 1

   When briefing senior management on the creation of a governance process, the MOST important aspect should be:

   Choose one answer.

   • knowledge required to analyze each issue
   • information security metrics
   • linkage to business area objectives
   • baseline against which metrics are evaluated

2. Question 2 · 1

   Which of the following is of MOST importance when security leaders of an organization are required to align security to influence the culture of an organization?

   Choose one answer.

   • Understand the business goals of the organization
   • Poses a strong technical background
   • Poses a strong auditing background
   • Understand all regulations affecting the organization

3. Question 3 · 1

   Which of the following activities results in change requests?

   Choose one answer.

   • Corrective actions
   • Defect repair
   • Preventive actions
   • Inspection

4. Question 4 · 1

   Who is responsible for securing networks during a security incident?

   Choose one answer.

   • Security Operations Center (SOC)
   • Chief Information Security Officer (CISO)
   • Disaster Recovery (DR) manager
   • Incident response Team (IRT)

5. Question 5 · 1

   The success of the Chief Information Security Officer is MOST dependent upon:

   Choose one answer.

   • following the recommendations of consultants and contractors
   • raising awareness of security issues with end users
   • favorable audit findings
   • development of relationships with organization executives

6. Question 6 · 1

   The PRIMARY objective of security awareness is to:

   Choose one answer.

   • Encourage security-conscious employee behavior
   • Put employees on notice in case follow-up action for noncompliance is necessary
   • Ensure that security policies are read
   • Meet legal and regulatory requirements

7. Question 7 · 1

   What should an organization do to ensure that they have a sound Business Continuity (BC) Plan?

   Choose one answer.

   • Conduct a Disaster Recovery (DR) exercise every year to test the plan
   • Conduct periodic tabletop exercises to refine the BC plan
   • Test every three years to ensure that the BC plan is valid
   • Define the Recovery Point Objective (RPO)

8. Question 8 · 1

   Which of the following is MOST likely to be discretionary?

   Choose one answer.

   • Policies
   • Procedures
   • Guidelines
   • Standards

9. Question 9 · 1

   Creating a secondary authentication process for network access would be an example of?

   Choose one answer.

   • Defense in depth cost enumerated costs
   • Nonlinearities in physical security performance metrics
   • System hardening and patching requirements
   • Anti-virus for mobile devices

10. Question 10 · 1

    Which of the following BEST describes an international standard framework that is based on the security model Information Technology-Code of Practice for Information Security Management?

    Choose one answer.

    • National Institute of Standards and technology Special Publication SP 800-12
    • Request for Comment 2196
    • International Organization for Standardization 27001
    • National Institute of Standards and technology Special Publication SP 800-26

11. Question 11 · 1

    Which of the following has the GREATEST impact on the implementation of an information security governance model?

    Choose one answer.

    • Complexity of organizational structure
    • Distance between physical locations
    • Organizational budget
    • Number of employees

12. Question 12 · 1

    You are the Chief Information Security Officer of a large, multinational bank and you suspect there is a flaw in a two factor authentication token management process. Which of the following represents your BEST course of action?

    Choose one answer.

    • Determine program ownership to implement compensating controls
    • Send a report to executive peers and business unit owners detailing your suspicions
    • Validate that security awareness program content includes information about the potential vulnerability
    • Conduct a throughout risk assessment against the current implementation to determine system functions

13. Question 13 · 1

    When dealing with Security Incident Response procedures, which of the following steps come FIRST when reacting to an incident?

    Choose one answer.

    • Eradication
    • Escalation
    • Containment
    • Recovery

14. Question 14 · 1

    Which of the following set of processes is considered to be one of the cornerstone cycles of the International Organization for Standardization (ISO) 27001 standard?

    Choose one answer.

    • Plan-Check-Do-Act
    • Plan-Select-Implement-Evaluate
    • Plan-Do-Check-Act
    • SCORE (Security Consensus Operational Readiness Evaluation)

15. Question 15 · 1

    When you develop your audit remediation plan what is the MOST important criteria?

    Choose one answer.

    • To validate the remediation process with the auditor.
    • To validate that the cost of the remediation is less than risk of the finding.
    • To remediate half of the findings before the next audit.
    • To remediate all of the findings before the next audit.

Paid access to all 150 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.