712-50 practice questions 101–110

1. Question 101 · 188 in bank

   A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization. Which of the following principles does this best demonstrate?

   • AEffective use of existing technologies
   • BCreate a comprehensive security awareness program and provide success metrics to business units
   • CProper budget management
   • DLeveraging existing implementations

   Show answer

   Answer: D

   Explanation

   D. Leveraging existing implementations. By conducting an analysis of the IT infrastructure, the CISO aims to leverage existing implementations, meaning they want to maximize the use and effectiveness of the organization's current security solutions. This approach recognizes the value of utilizing the systems and technologies that are already in place rather than completely replacing or discarding them. It allows for cost savings, optimization of resources, and minimizing disruption to the overall IT environment

   Source: Adapted from community discussion — arifbhatkar

   Next question

2. Question 102 · 188 in bank

   The network administrator wants to strengthen physical security in the organization. Specifically, to implement a solution stopping people from entering certain restricted zones without proper credentials. Which of following physical security measures should the administrator use?

   • AVideo surveillance
   • BMantrap
   • CBollards
   • DFence

   Show answer

   Answer: B

   Explanation

   A network administrator implementing physical controls (which not the right way to do this, but anyway...) is likely interested in protecting network equipment, network circuits etc. A fence will unlikely do so, but the question clearly eliminates fence as an option, by stating "Specifically, to implement a solution stopping people from entering certain restricted zones without proper credentials" A fence doesn't restrict based on credentials (height is not a credential). A mantrap, while it can be unauthenticated, by definition it should.

   Source: Adapted from community discussion — Otto_Aulicino

   Next question

3. Question 103 · 188 in bank

   Which of the following is the MOST logical method of deploying security controls within an organization?

   • AObtain funding for all desired controls and then create project plans for implementation
   • BApply the simpler controls as quickly as possible and use a risk-based approach for the more difficult and costly controls
   • CApply the least costly controls to demonstrate positive program activity
   • DObtain business unit buy-in through close communication and coordination

   Show answer

   Answer: D

   Next question

4. Question 104 · 188 in bank

   Which of the following is a primary method of applying consistent configurations to IT systems?

   • AAudits
   • BAdministration
   • CPatching
   • DTemplates

   Show answer

   Answer: D

   Explanation

   D. Templates. Templates provide a standardized and efficient way to apply consistent configurations to IT systems. A template is a pre-defined configuration or set of settings that can be applied to multiple systems or devices. By using templates, organizations can ensure that systems are configured consistently according to best practices and security requirements.

   Source: Adapted from community discussion — arifbhatkar

   Next question

5. Question 105 · 188 in bank

   Where does bottom-up financial planning primarily gain information for creating budgets?

   • ABy adding all capital and operational costs from the prior budgetary cycle, and determining potential financial shortages
   • BBy reviewing last year's program-level costs and adding a percentage of expected additional portfolio costs
   • CBy adding the cost of all known individual tasks and projects that are planned for the next budgetary cycle
   • DBy adding all planned operational expenses per quarter then summarizing them in a budget request

   Show answer

   Answer: C

   Next question

6. Question 106 · 188 in bank

   When dealing with a risk management process, asset classification is important because it will impact the overall:

   • AThreat identification
   • BRisk treatment
   • CRisk monitoring
   • DRisk tolerance

   Show answer

   Answer: A

   Explanation

   B is correct, because Asset classification is important in the risk management process because it will impact the overall risk treatment. Asset classification involves identifying and categorizing assets based on their value, criticality, sensitivity, and other relevant factors. This classification helps determine the appropriate level of protection and resources that should be allocated to each asset. Based on the classification of assets, the organization can determine the appropriate risk treatment strategy, which may include risk avoidance, risk mitigation, risk transfer, or risk acceptance.

   Source: Adapted from community discussion — Pika26

   Next question

7. Question 107 · 188 in bank

   Which of the following best describes revenue?

   • ANon-operating financial liabilities minus expenses
   • BThe true profit-making potential of an organization
   • CThe sum value of all assets and cash flow into the business
   • DThe economic benefit derived by operating a business

   Show answer

   Answer: D

   Explanation

   Revenue represents the total amount of money generated by the sale of goods or services related to the company's primary operations. It is often referred to as the "top line" because it is the starting point for calculating net income, which is known as the "bottom line." Revenue is a critical measure of the economic benefit that an organization derives from its regular business activities

   Source: Adapted from community discussion — johndoe69

   Next question

8. Question 108 · 188 in bank

   During the 3rd quarter of a budget cycle, the CISO noticed she spent more than was originally planned in her annual budget. What is the condition of her current budgetary posture?

   • AThe budget is in a temporary state of imbalance
   • BThe budget is operating at a deficit
   • CShe can realign the budget through moderate capital expense (CAPEX) allocation
   • DShe has a surplus of operational expenses (OPEX)

   Show answer

   Answer: B

   Next question

9. Question 109 · 188 in bank

   The primary purpose of a risk register is to:

   • AMaintain a log of discovered risks
   • BTrack individual risk assessments
   • CDevelop plans for mitigating identified risks
   • DCoordinate the timing of scheduled risk assessments

   Show answer

   Answer: A

   Explanation

   Reference: https://sitemate.com/us/resources/articles/safety/purpose-of-a-risk-register/

   Next question

10. Question 110 · 188 in bank

    What is meant by password aging?

    • AAn expiration date set for passwords
    • BA Single Sign-On requirement
    • CTime in seconds a user is allocated to change a password
    • DThe amount of time it takes for a password to activate

    Show answer

    Answer: A

    Explanation

    Reference: https://medical-dictionary.thefreedictionary.com/password+ageing

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

712-50 practice, question 101. 188 questions available.