712-50 Free Practice Test

- (Exam Topic 2)
The regular review of a firewall ruleset is considered a

1. A. Procedural control
2. B. Organization control
3. C. Technical control
4. D. Management control

Correct Answer: A

- (Exam Topic 3)
Your incident response plan should include which of the following?

1. A. Procedures for litigation
2. B. Procedures for reclamation
3. C. Procedures for classification
4. D. Procedures for charge-back

Correct Answer: C

- (Exam Topic 3)
In order for a CISO to have true situational awareness there is a need to deploy technology that can give a real-time view of security events across the enterprise. Which tool selection represents the BEST choice to achieve situational awareness?

1. A. Vmware, router, switch, firewall, syslog, vulnerability management system (VMS)
2. B. Intrusion Detection System (IDS), firewall, switch, syslog
3. C. Security Incident Event Management (SIEM), IDS, router, syslog
4. D. SIEM, IDS, firewall, VMS

Correct Answer: D

- (Exam Topic 5)
When creating contractual agreements and procurement processes why should security requirements be included?

1. A. To make sure they are added on after the process is completed
2. B. To make sure the costs of security is included and understood
3. C. To make sure the security process aligns with the vendor’s security process
4. D. To make sure the patching process is included with the costs

Correct Answer: B

- (Exam Topic 4)
The process of identifying and classifying assets is typically included in the

1. A. Threat analysis process
2. B. Asset configuration management process
3. C. Business Impact Analysis
4. D. Disaster Recovery plan

Correct Answer: B