712-50 Exam Dumps | The ability to require implementation and management of security controls within third-party provided

<< Prev Question Next Question >>

Question 253/272

The ability to require implementation and management of security controls within third-party provided services is a critical part of:

A. Disaster recovery

B. Vendor management

C. Security Governance

D. Compliance management

Question List (272q): Question 1: The effectiveness of an audit is measured by?...; Question 2: Which of the following is the BEST security control for redu...; Question 3: Which of the following is the MAIN security concern for publ...; Question 4: Which of the following provides the BEST ability to view pot...; Question 5: When reviewing a Solution as a Service (SaaS) provider's sec...; Question 6: What are the three PRIMARY constraints of project management...; Question 7: An employee successfully avoids becoming a victim of a sophi...; Question 8: Which is the single MOST important factor for introducing di...; Question 9: An organization licenses and uses personal information for b...; Question 10: Which of the following controls is MOST critical for protect...; Question 11: A security team member calls you to inform you that one of y...; Question 12: Which of the following has the GREATEST impact on the implem...; Question 13: Which of the following is MOST effective when mitigating soc...; Question 14: A new CISO just started with a company and on the CISO's des...; Question 15: Which of the following BEST describes revenue?...; Question 16: Which of the following conditions would be the MOST probable...; Question 17: The process for management approval of the security certific...; Question 18: Information Security is often considered an excessive, after...; Question 19: Which of the following are necessary to formulate responses ...; Question 20: A missing/ineffective security control is identified. Which ...; Question 21: The new CISO was informed of all the Information Security pr...; Question 22: What is MOST critical when managing the critical path of a p...; Question 23: When would it be more desirable to develop a set of decentra...; Question 24: Which of the following is the MOST important to share with a...; Question 25: What is the primary reason for performing a return on invest...; Question 26: When you develop your audit remediation plan what is the MOS...; Question 27: With respect to the audit management process, management res...; Question 28: Controls that were implemented to correct prior audit findin...; Question 29: Access Control lists (ACLs), Firewalls, and Intrusion Preven...; Question 30: What should an auditor do after discovering that a security ...; Question 31: A recent audit has identified control exceptions and recomme...; Question 32: In order to improve situational awareness, there is a need t...; Question 33: When obtaining new products and services, why is it essentia...; Question 34: Credit card information, medical data, and government record...; Question 35: Which of the following defines the boundaries and scope of a...; Question 36: A Security Operations Centre (SOC) manager is informed that ...; Question 37: In MOST organizations which group periodically reviews netwo...; Question 38: What oversight should the information security team have in ...; Question 39: During an initial investigation, the Incident Response Team ...; Question 40: After a risk assessment is performed, a particular risk is c...; Question 41: Which regulation or policy governs protection of personally ...; Question 42: In effort to save your company money which of the following ...; Question 43: As the CISO, you have been tasked with the execution of the ...; Question 44: Which level of data destruction applies logical techniques t...; Question 45: Providing oversight of a comprehensive information security ...; Question 46: Scenario: You are the newly hired Chief Information Security...; Question 47: Many times a CISO may have to speak to the Board of Director...; Question 48: At which point should the identity access management team be...; Question 49: What is the MAIN reason for conflicts between Information Te...; Question 50: A Security Operations Manager is finding it difficult to mai...; Question 51: Scenario: An organization has made a decision to address Inf...; Question 52: Which of the following is a countermeasure to prevent unauth...; Question 53: When dealing with risk, the information security practitione...; Question 54: Which of the following is the MOST critical to review before...; Question 55: Scenario: Most industries require compliance with multiple g...; Question 56: Acceptable levels of information security risk tolerance in ...; Question 57: A recommended method to document the respective roles of gro...; Question 58: A recent audit has identified a few control exceptions and i...; Question 59: The process for identifying, collecting, and producing digit...; Question 60: What is the SECOND step to creating a risk management method...; Question 61: The PRIMARY objective of security awareness is to:...; Question 62: When managing a project, the MOST important activity in mana...; Question 63: Of the following types of SOCs (Security Operations Centers)...; Question 64: Which of the following will be MOST helpful for getting an I...; Question 65: Which of the following strategies provides the BEST response...; Question 66: The rate of change in technology increases the importance of...; Question 67: An organization recently acquired a Data Loss Prevention (DL...; Question 68: Which of the following is the MOST important goal of risk ma...; Question 69: One of the MAIN goals of a Business Continuity Plan is to...; Question 70: Your company has limited resources to spend on security init...; Question 71: When gathering security requirements for an automated busine...; Question 72: A key cybersecurity feature of a Personal Identification Ver...; Question 73: What is the PRIMARY weakness of a Cost Benefit Analysis (CBA...; Question 74: Which of the following is a fundamental component of an audi...; Question 75: Which of the following is used to lure attackers into false ...; Question 76: A business unit within your organization intends to deploy a...; Question 77: SCENARIO: A Chief Information Security Officer (CISO) recent...; Question 78: What is the MOST important reason to have senior leadership ...; Question 79: Which of the following statements below regarding Key Perfor...; Question 80: The mean time to patch, number of virus outbreaks prevented,...; Question 81: Acme Inc. has engaged a third party vendor to provide 99.999...; Question 82: What is the purpose of the statement of retained earnings of...; Question 83: During a cyber incident, which of the following non-security...; Question 84: Which security technologies are MOST critical to implementin...; Question 85: Which organizational structure blends elements of functional...; Question 86: A global retail organization is looking to implement a consi...; Question 87: What is the purpose of a purple security testing team?...; Question 88: SCENARIO: A CISO has several two-factor authentication syste...; Question 89: When should IT security project management be outsourced?...; Question 90: A CISO decides to analyze the IT infrastructure to ensure se...; Question 91: If a Virtual Machine's (VM) data is being replicated and tha...; Question 92: A vendor delivering services refuses to make changes to work...; Question 93: Which of the following is the MOST effective method for disc...; Question 94: Which of the following is a weakness of an asset or group of...; Question 95: In what phase of an incident management process will malware...; Question 96: In defining a strategic security plan for an organization, w...; Question 97: An application vulnerability assessment has identified a sec...; Question 98: Creating a secondary authentication process for network acce...; Question 99: You have been promoted to the CISO of a big-box retail store...; Question 100: Which of the following functions MUST your Information Secur...; Question 101: Scenario: The new CISO was informed of all the Information S...; Question 102: Which of the following is the MOST logical method of deployi...; Question 103: A CISO decides to analyze the IT infrastructure to ensure se...; Question 104: As the new CISO at the company you are reviewing the audit r...; Question 105: What is the FIRST step in developing the vulnerability manag...; Question 106: Which of the following is critical for a successful risk man...; Question 107: Which of the following are primary concerns for management w...; Question 108: Which of the following reports should you as an IT auditor u...; Question 109: How often should the SSAE16 report of your vendors be review...; Question 110: What key technology can mitigate ransomware threats?...; Question 111: What is the main purpose of the Incident Response Team?...; Question 112: Which of the following uses encapsulation and encryption?...; Question 113: Which control is used to discourage the exploitation of a vu...; Question 114: What does the information security program primarily protect...; Question 115: The formal certification and accreditation process has four ...; Question 116: An organization's firewall technology needs replaced. A spec...; Question 117: A global health insurance company is concerned about protect...; Question 118: Enforcing the implementation and management of security cont...; Question 119: As the Chief Information Security Officer, you want to ensur...; Question 120: Which of the following is MOST important when dealing with a...; Question 121: In terms of supporting a forensic investigation, it is now i...; Question 122: What are the four groups that are critical to the success of...; Question 123: The governing body that defines best practices for the colle...; Question 124: Scenario: Your corporate systems have been under constant pr...; Question 125: File Integrity Monitoring (FIM) is considered a...; Question 126: What is the next step after defining the conditions under wh...; Question 127: Which of the following best describes a portfolio?...; Question 128: What standard would you use to help define key performance i...; Question 129: Risk appetite is typically determined by which of the follow...; Question 130: Risk transference is BEST represented by which of the follow...; Question 131: Why would you follow a formal risk management process in an ...; Question 132: What is the term describing the act of inspecting all real-t...; Question 133: Scenario: Your corporate systems have been under constant pr...; Question 134: Which of the following compliance standards is the MOST comm...; Question 135: In accordance with best practices and international standard...; Question 136: You are just hired as the new CISO and are being briefed on ...; Question 137: Which of the following is MOST likely to be discretionary?...; Question 138: What function in an organization is responsible for collecti...; Question 139: What is a critical initial step when creating a Business Con...; Question 140: What does an anonymous network consist of as the PRIMARY sup...; Question 141: When managing the critical path of an IT security project, w...; Question 142: The Information Security Management program MUST protect:...; Question 143: Which of the following is of MOST importance when security l...; Question 144: You have been promoted to the CISO of a retail store. Which ...; Question 145: What type of test is performed by an auditor when a sample o...; Question 146: You are the Chief Information Security Officer of a large, m...; Question 147: Which type of scan is used on the eye to measure the layer o...; Question 148: The security team has investigated the theft/loss of several...; Question 149: The alerting, monitoring and life-cycle management of securi...; Question 150: Step-by-step procedures to regain normalcy in the event of a...; Question 151: If your organization operates under a model of "assumption o...; Question 152: Which of the following provides the BEST software risk remed...; Question 153: Which of the following is a metric used for data backup and ...; Question 154: A severe security threat has been detected on your corporate...; Question 155: Which of the following is the MOST important for a CISO to u...; Question 156: What organizational structure combines the functional and pr...; Question 157: What term BEST describes assuring the actions of employees, ...; Question 158: What is the first action taken when reacting to a malware at...; Question 159: How often should an environment be monitored for cyber threa...; Question 160: Which of the following functions evaluates risk present in I...; Question 161: An organization has decided to develop an in-house BCM capab...; Question 162: A digital signature addresses which of the following concern...; Question 163: Which of the following would be used to measure the effectiv...; Question 164: The executive board has requested that the CISO define Key P...; Question 165: Which of the following BEST mitigates ransomware threats?...; Question 166: The patching and monitoring of systems on a consistent sched...; Question 167: Ciphertext is encrypted with the same key used by the recipi...; Question 168: When analyzing and forecasting a capital expense budget what...; Question 169: Which of the following can the company implement in order to...; Question 170: Human resource planning for security professionals in your o...; Question 171: When considering using a vendor to help support your securit...; Question 172: A university recently hired a CISO. One of the first tasks i...; Question 173: Which of the following is MOST useful when developing a busi...; Question 174: You have implemented the new controls. What is the next step...; Question 175: Which of the following illustrates an operational control?...; Question 176: An organization has a stated requirement to block certain tr...; Question 177: The mean time to patch, number of virus outbreaks prevented,...; Question 178: An organization's Information Security Policy is of MOST imp...; Question 179: How is an Annual Loss Expectancy (ALE) calculated?...; Question 180: What is the BEST practice for having vendors verify controls...; Question 181: Which type of physical security control scan a person's exte...; Question 182: Which of the following MOST heavily influences the informati...; Question 183: To make sure that the actions of all employees, applications...; Question 184: As the CISO you need to write the IT security strategic plan...; Question 185: A bastion host should be placed:...; Question 186: Which of the following is a term related to risk management ...; Question 187: What does the acronym RACI stand for?...; Question 188: What is the name of a formal statement that defines the stra...; Question 189: Which of the following refers to the quantity or quality of ...; Question 190: The Health Insurance Portability and Accountability Act (HIP...; Question 191: Which of the following is considered a project versus a mana...; Question 192: Scenario: Your company has many encrypted telecommunications...; Question 193: Physical security measures typically include which of the fo...; Question 194: What type of control is used when patching systems with the ...; Question 195: When deploying an Intrusion Prevention System (IPS) the BEST...; Question 196: What is a difference from the list below between quantitativ...; Question 197: Which of the following is critical in creating a security pr...; Question 198: Which of the following is the MOST effective way to measure ...; Question 199: Why is it vitally important that senior management endorse a...; Question 200: Ciphertext is encrypted with a result being a compressed rep...; Question 201: When gathering security requirements for an enterprise softw...; Question 202: Which of the following best summarizes the primary goal of a...; Question 203: Bob waits near a secured door, holding a box. He waits until...; Question 204: Risk that remains after risk mitigation is known as...; Question 205: The primary responsibility for assigning entitlements to a n...; Question 206: What is protected by Federal Information Processing Standard...; Question 207: Which of the following best describes the purpose of the Int...; Question 208: SCENARIO: Critical servers show signs of erratic behavior wi...; Question 209: When developing the Business Impact Assessment (BIA), which ...; Question 210: Which of the following metrics would be MOST effective for m...; Question 211: What is an approach to estimating the strengths and weakness...; Question 212: Which of the following is MOST beneficial in determining an ...; Question 213: When gathering security requirements for an automated busine...; Question 214: A security project is over a year behind schedule and over b...; Question 215: During the course of a risk analysis your IT auditor identif...; Question 216: The network administrator wants to strengthen physical secur...; Question 217: As the CISO for your company you are accountable for the pro...; Question 218: Over 90% of successful cyber-attacks currently include: Soci...; Question 219: Where does bottom-up financial planning primarily gain infor...; Question 220: A stakeholder is a person or group:...; Question 221: Which security technologies are critical for a zero trust mo...; Question 222: Which of the following represents the BEST reason for an org...; Question 223: The executive board has requested that the CISO of an organi...; Question 224: The implementation of anti-malware and anti-phishing control...; Question 225: When you develop your audit remediation plan what is the MOS...; Question 226: A security project gets a great deal of resistance across th...; Question 227: What is a key policy that should be part of the information ...; Question 228: Scenario: You are the CISO and have just completed your firs...; Question 229: What Enterprise Architecture Framework is business-centric a...; Question 230: A security manager has created a risk program. Which of the ...; Question 231: The single most important consideration to make when develop...; Question 232: Which of the following terms is defined as the friction or o...; Question 233: Which of the following are the MOST important factors for pr...; Question 234: An organization has defined a set of standard security contr...; Question 235: You currently cannot provide for 24/7 coverage of your secur...; Question 236: SCENARIO: A CISO has several two-factor authentication syste...; Question 237: XYZ is a publicly-traded software development company. Who i...; Question 238: What is meant by password aging?...; Question 239: Which of the following methods are used to define contractua...; Question 240: Dataflow diagrams are used by IT auditors to:...; Question 241: A global retail company is creating a new compliance managem...; Question 242: Network Forensics is the prerequisite for any successful leg...; Question 243: Which of the following most commonly falls within the scope ...; Question 244: Which publication serves as a resource of enterprise securit...; Question 245: Which of the following is the MOST effective method to measu...; Question 246: An example of professional unethical behavior is:...; Question 247: An organization is required to implement background checks o...; Question 248: When assessing internal control objectives, what are the aud...; Question 249: What is the PRIMARY difference between encryption and tokeni...; Question 250: Quantitative Risk Assessments have the following advantages ...; Question 251: What is the MAIN responsibility of the purple security testi...; Question 252: In which of the following examples would an organization be ...; Question 253: The ability to require implementation and management of secu...; Question 254: Which of the following is the MOST effective technology to c...; Question 255: What is the MOST critical output of the incident response pr...; Question 256: Which of the following is MOST important when tuning an Intr...; Question 257: What is the relationship between information protection and ...; Question 258: ABC Limited has recently suffered a security breach with cus...; Question 259: Which of the following provides an independent assessment of...; Question 260: What would be the MOST likely reason a CISO sees abnormally ...; Question 261: Which of the following is the BEST reason for CISO collabora...; Question 262: What is the estimate of all direct and indirect costs associ...; Question 263: Which of the following represents the best method of ensurin...; Question 264: Who should be involved in the development of an internal cam...; Question 265: A Chief Information Security Officer received a list of high...; Question 266: The total cost of security controls should:...; Question 267: As the CISO, you are the project sponsor for a highly visibl...; Question 268: Which of the following are the triple constraints of project...; Question 269: Which of the following statements about Encapsulating Securi...; Question 270: Which risk analysis method is the MOST effective for determi...; Question 271: Annual Loss Expectancy is derived from the function of which...; Question 272: Effective information security management programs require t...

Question 253/272

LEAVE A REPLY

Download PDF File