Question 21 · 188 in bank
A security manager has created a risk program. Which of the following is a critical part of ensuring the program is successful?
Show answer
Answer: C
EC-Council Certified Chief Information Security Officer (CCISO)188 questions across 19 pages are complete and free, with no account or card.
188 questions in this bank
Free access · progress saved on this device
A security manager has created a risk program. Which of the following is a critical part of ensuring the program is successful?
Answer: C
A Chief Information Security Officer received a list of high, medium, and low impact audit findings. Which of the following represents the BEST course of action?
Answer: C
An information security department is required to remediate system vulnerabilities when they are discovered. Please select the three primary remediation methods that can be used on an affected system.
Answer: A
Which represents PROPER separation of duties in the corporate environment?
Answer: B
Proper Separation of Duties: Separation of duties (SoD) is a key principle in internal controls that ensures no single individual has control over all aspects of any critical function or process. This principle helps prevent fraud, errors, and conflicts of interest. Information Security and Identity Access Management (IAM): These two teams perform distinct functions. Information Security is responsible for the overall security posture, policies, and incident response, while IAM focuses specifically on managing user identities and access privileges. Separating these duties helps ensure that no single team has too much control over both the security policies and the access to critical systems.
Source: Adapted from community discussion — johndoe69
Who in the organization determines access to information?
Answer: C
Step-by-step procedures to regain normalcy in the event of a major earthquake is PRIMARILY covered by which of the following plans?
Answer: B
The question does not state the word "technical" and hence is there a reason why Business Continuity Plan is not the correct answer? DR comes under BCP.
Source: Adapted from community discussion — UNN_CCISO
An employee successfully avoids becoming a victim of a sophisticated spear phishing attack due to knowledge gained through the corporate information security awareness program. What type of control has been effectively utilized?
Answer: C
When managing an Information Security Program, which of the following is of MOST importance in order to influence the culture of an organization?
Answer: D
Which of the following are primary concerns for management with regard to assessing internal control objectives?
Answer: B
Answer is B: COSO framework defines internal control as a process regarding the achievement of objectives in the following categories: effectiveness and efficiency of operations, reliability of financial reporting, compliance with applicable laws and regulations.
Source: Adapted from community discussion — Nickknock
The effectiveness of an audit is measured by?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
712-50 practice, question 21. 188 questions available.
Version 1.0.0. How we source questions