Question 181 · 188 in bank
Which of the following is the MOST important goal of risk management?
Show answer
Answer: A
EC-Council Certified Chief Information Security Officer (CCISO)188 questions across 19 pages are complete and free, with no account or card.
188 questions in this bank
Free access · progress saved on this device
Which of the following is the MOST important goal of risk management?
Answer: A
What is the SECOND step to creating a risk management methodology according to the National Institute of Standards and Technology (NIST) SP 800-30 standard?
Answer: B
According to NIST 800-30: (https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-30r1.pdf) Risk management processes include: (i) framing risk; (ii) assessing risk; (iii) responding to risk; and (iv) monitoring risk. B=assesing risk
Source: Adapted from community discussion — VOAKDO_cciso
Which of the following tests is performed by an Information Systems (IS) auditor when a sample of programs is selected to determine if the source and object versions are the same?
Answer: C
The patching and monitoring of systems on a consistent schedule is required by?
Answer: C
Correct answer A. Industry best practices The patching and monitoring of systems on a consistent schedule is required by industry best practices. Industry standards and guidelines, such as those provided by organizations like the National Institute of Standards and Technology (NIST), the Center for Internet Security (CIS), and the International Organization for Standardization (ISO), emphasize the importance of regular patching and monitoring as fundamental security practices
Source: Adapted from community discussion — arifbhatkar
The Annualized Loss Expectancy (Before) minus Annualized Loss Expectancy (After) minus Annual Safeguard Cost is the formula for determining:
Answer: D
Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN. What type of control is being implemented by supervisors and data owners?
Answer: C
Optical biometric recognition such as retina scanning provides access to facilities through reading the unique characteristics of a person's eye. However, authorization failures can occur with individuals who have?
Answer: A
What is generally the FIRST step in Information Security program development?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
712-50 practice, question 181. 188 questions available.
Version 1.0.0. How we source questions