712-50 Free Practice Test

- (Topic 3)
When considering using a vendor to help support your security devices remotely, what is the BEST choice for allowing access?

1. A. Vendors uses their own laptop and logins with same admin credentials your security team uses
2. B. Vendor uses a company supplied laptop and logins using two factor authentication with same admin credentials your security team uses
3. C. Vendor uses a company supplied laptop and logins using two factor authentication with their own unique credentials
4. D. Vendor uses their own laptop and logins using two factor authentication with their own unique credentials

Correct Answer: C

- (Topic 2)
Which of the following are necessary to formulate responses to external audit findings?

1. A. Internal Audit, Management, and Technical Staff
2. B. Internal Audit, Budget Authority, Management
3. C. Technical Staff, Budget Authority, Management
4. D. Technical Staff, Internal Audit, Budget Authority

Correct Answer: C

- (Topic 3)
Which of the following represents the BEST method of ensuring security program alignment to business needs?

1. A. Create a comprehensive security awareness program and provide success metrics to business units
2. B. Create security consortiums, such as strategic security planning groups, that include business unit participation
3. C. Ensure security implementations include business unit testing and functional validation prior to production rollout
4. D. Ensure the organization has strong executive-level security representation through clear sponsorship or the creation of a CISO role

Correct Answer: B

- (Topic 1)
Which of the following provides an audit framework?

1. A. Control Objectives for IT (COBIT)
2. B. Payment Card Industry-Data Security Standard (PCI-DSS)
3. C. International Organization Standard (ISO) 27002
4. D. National Institute of Standards and Technology (NIST) SP 800-30

Correct Answer: :A

- (Topic 3)
The company decides to release the application without remediating the high-risk vulnerabilities. Which of the following is the MOST likely reason for the company to release the application?

1. A. The company lacks a risk management process
2. B. The company does not believe the security vulnerabilities to be real
3. C. The company has a high risk tolerance
4. D. The company lacks the tools to perform a vulnerability assessment

Correct Answer: C