Question 31 · 188 in bank
The alerting, monitoring and life-cycle management of security-related events is typically handled by the_________________.
Show answer
Answer: D
EC-Council Certified Chief Information Security Officer (CCISO)188 questions across 19 pages are complete and free, with no account or card.
188 questions in this bank
Free access · progress saved on this device
The alerting, monitoring and life-cycle management of security-related events is typically handled by the_________________.
Answer: D
Control Objectives for Information and Related Technology (COBIT) is which of the following?
Answer: C
Which of the following are not stakeholders of IT security projects?
Answer: C
Third party vendors could be important stakeholders depending on the project. Perhaps the person writing the question envisaged they would be a simple supplier but often in IT these days vendors are in partnership to provide critical services so could be an important stakeholder.
Source: Adapted from community discussion — Kentish
The FIRST step in establishing a security governance program is to?
Answer: A
Your incident response plan should include which of the following?
Answer: C
To get an Information Security project back on schedule, which of the following will provide the MOST help?
Answer: E
You currently cannot provide for 24/7 coverage of your security monitoring and incident response duties and your company is resistant to the idea of adding more full-time employees to the payroll. Which combination of solutions would help to provide the coverage needed without the addition of more dedicated staff?
Answer: D
When an organization claims it is secure because it is PCI-DSS certified, what is a good first question to ask towards assessing the effectiveness of their security program?
Answer: C
Scope may be just an Application/system, or even an outsourced service independently of the #transacuins and #records. leaving the rest of operations activities out of such an scope
Source: Adapted from community discussion — JeBaCas
Your company has a `no right to privacy` notice on all logon screens for your information systems and users sign an Acceptable Use Policy informing them of this condition. A peer group member and friend comes to you and requests access to one of her employee's email account. What should you do?
Answer: C
Which business stakeholder is accountable for the integrity of a new information system?
Answer: B
I would have thought the system owner would be accountable, the CISO's role is to advise the business owner, but the business owners are accountable for taking the action to protect the system and it is their choice to release it.
Source: Adapted from community discussion — Kentish
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
712-50 practice, question 31. 188 questions available.
Version 1.0.0. How we source questions