Question 71 · 188 in bank
What is the primary reason for performing vendor management?
Show answer
Answer: B
EC-Council Certified Chief Information Security Officer (CCISO)188 questions across 19 pages are complete and free, with no account or card.
188 questions in this bank
Free access · progress saved on this device
What is the primary reason for performing vendor management?
Answer: B
Physical security measures typically include which of the following components?
Answer: D
An organization's Information Security Policy is of MOST importance because_____________.
Answer: C
What is the term describing the act of inspecting all real-time Internet traffic (i.e., packets) traversing a major Internet backbone without introducing any apparent latency?
Answer: B
The general ledger setup function in an enterprise resource package allows for setting accounting periods. Access to this function has been permitted to users in finance, the shipping department, and production scheduling. What is the most likely reason for such broad access?
Answer: D
Answer is D. The segregation of duties principle suggests that critical functions, such as accounting and financial reporting, should be divided among different people to ensure that no single person has complete control over the entire process.
Source: Adapted from community discussion — Pika26
What is the FIRST step in developing the vulnerability management program?
Answer: B
Which of the following is the MOST important benefit of an effective security governance process?
Answer: D
A Security Operations Centre (SOC) manager is informed that a database containing highly sensitive corporate strategy information is under attack. Information has been stolen, and the database server was disconnected. Who must be informed of this incident?
Answer: B
B. The data owner The data owner is responsible for the data and is the primary stakeholder in terms of understanding the sensitivity and importance of the data. Informing the data owner promptly allows them to take appropriate actions, such as initiating an incident response, assessing the impact, and making decisions regarding further notifications and mitigation steps. The data owner can then coordinate with other relevant parties, such as internal audit, executive staff, and government regulators, if necessary.
Source: Adapted from community discussion — johndoe69
Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates. What is one proven method to account for common elements found within separate regulations and/or standards?
Answer: B
Scenario: Your program is developed around minimizing risk to information by focusing on people, technology, and operations. You have decided to deal with risk to information from people first. How can you minimize risk to your most sensitive information before granting access?
Answer: B
B. Develop an Information Security Awareness program. Developing an Information Security Awareness program is crucial for educating employees about the importance of protecting sensitive information and promoting secure practices. This program can include training sessions, workshops, and regular communication to raise awareness about security risks, policies, and best practices
Source: Adapted from community discussion — arifbhatkar
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
712-50 practice, question 71. 188 questions available.
Version 1.0.0. How we source questions