Online Access Free 512-50 Exam Questions

When dealing with Security Incident Response procedures, which of the following steps come FIRST when reacting to an incident?

• A.Escalation
• B.Containment
• C.Eradication
• D.Recovery

Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.
The CISO has been able to implement a number of technical controls and is able to influence the Information Technology teams but has not been able to influence the rest of the organization. From an organizational perspective, which of the following is the LIKELY reason for this?

• A.The CISO has not implemented a policy management framework
• B.The CISO reports to the IT organization
• C.The CISO has not implemented a security awareness program
• D.The CISO does not report directly to the CEO of the organization

Which of the following is considered a project versus a managed process?

• A.monitoring external and internal environment during incident response
• B.ongoing risk assessments of routine operations
• C.continuous vulnerability assessment and vulnerability repair
• D.installation of a new firewall system

Which of the following is a weakness of an asset or group of assets that can be exploited by one or more threats?

• A.Exploitation
• B.Attack vector
• C.Threat
• D.Vulnerability

An application vulnerability assessment has identified a security flaw in an application. This is a flaw that was previously identified and remediated on a prior release of the application. Which of the following is MOST likely the reason for this recurring issue?

• A.Ineffective configuration management controls
• B.High turnover in the application development department
• C.Lack of version/source controls
• D.Lack of change management controls