712-50 Free Practice Test

- (Topic 5)
What are the primary reasons for the development of a business case for a security project?

1. A. To estimate risk and negate liability to the company
2. B. To understand the attack vectors and attack sources
3. C. To communicate risk and forecast resource needs
4. D. To forecast usage and cost per software licensing

Correct Answer: C

- (Topic 5)
You are just hired as the new CISO and are being briefed on all the Information Security projects that your section has on going. You discover that most projects are behind schedule and over budget.
Using the best business practices for project management you determine that the project correct aligns with the company goals. What needs to be verified FIRST?

1. A. Scope of the project
2. B. Training of the personnel on the project
3. C. Timeline of the project milestones
4. D. Vendor for the project

Correct Answer: A

- (Topic 3)
A CISO implements smart cards for credential management, and as a result has reduced costs associated with help desk operations supporting password resets. This demonstrates which of the following principles?

1. A. Security alignment to business goals
2. B. Regulatory compliance effectiveness
3. C. Increased security program presence
4. D. Proper organizational policy enforcement

Correct Answer: A

- (Topic 1)
Regulatory requirements typically force organizations to implement

1. A. Mandatory controls
2. B. Discretionary controls
3. C. Optional controls
4. D. Financial controls

Correct Answer: A

- (Topic 3)
A CISO has recently joined an organization with a poorly implemented security program. The desire is to base the security program on a risk management approach. Which of the following is a foundational requirement in order to initiate this type of program?

1. A. A security organization that is adequately staffed to apply required mitigation strategies and regulatory compliance solutions
2. B. A clear set of security policies and procedures that are more concept-based than controls-based
3. C. A complete inventory of Information Technology assets including infrastructure, networks, applications and data
4. D. A clearly identified executive sponsor who will champion the effort to ensure organizational buy-in

Correct Answer: :D