712-50 Free Practice Test

- (Exam Topic 5)
A large number of accounts in a hardened system were suddenly compromised to an external party. Which of the following is the MOST probable threat actor involved in this incident?

1. A. Poorly configured firewalls
2. B. Malware
3. C. Advanced Persistent Threat (APT)
4. D. An insider

Correct Answer: D

- (Exam Topic 2)
Which of the following represents the BEST reason for an organization to use the Control Objectives for Information and Related Technology (COBIT) as an Information Technology (IT) framework?

1. A. It allows executives to more effectively monitor IT implementation costs
2. B. Implementation of it eases an organization’s auditing and compliance burden
3. C. Information Security (IS) procedures often require augmentation with other standards
4. D. It provides for a consistent and repeatable staffing model for technology organizations

Correct Answer: B

- (Exam Topic 5)
Smith, the project manager for a larger multi-location firm, is leading a software project team that has 18
members, 5 of which are assigned to testing. Due to recent recommendations by an organizational quality audit team, the project manager is convinced to add a quality professional to lead to test team at additional cost to the project.
The project manager is aware of the importance of communication for the success of the project and takes the step of introducing additional communication channels, making it more complex, in order to assure quality levels of the project. What will be the first project management document that Smith should change in order to accommodate additional communication channels?

1. A. WBS document
2. B. Scope statement
3. C. Change control document
4. D. Risk management plan

Correct Answer: A

- (Exam Topic 5)
Access Control lists (ACLs), Firewalls, and Intrusion Prevention Systems are examples of

1. A. Network based security preventative controls
2. B. Software segmentation controls
3. C. Network based security detective controls
4. D. User segmentation controls

Correct Answer: A

- (Exam Topic 5)
Scenario: The new CISO was informed of all the Information Security projects that the section has in progress. Two projects are over a year behind schedule and way over budget.
Which of the following will be most helpful for getting an Information Security project that is behind schedule back on schedule?

1. A. Upper management support
2. B. More frequent project milestone meetings
3. C. More training of staff members
4. D. Involve internal audit

Correct Answer: A