Eccouncil dumpspedia last Attempt 512-50 Questions by Iona q283 vce pdf

Page: 5 / 14

Exam Name:	EC-Council Information Security Manager (E\|ISM)
Exam Code:	512-50 Dumps
Vendor:	ECCouncil	Certification:	EISM
Questions:	404 Q&A's	Shared By:	iona

Question 20

A CISO sees abnormally high volumes of exceptions to security requirements and constant pressure from business units to change security processes. Which of the following represents the MOST LIKELY cause of this situation?

Options:

Poor audit support for the security program

A lack of executive presence within the security program

Poor alignment of the security program to business needs

This is normal since business units typically resist security requirements

Discussion

Question 21

You are the CISO of a commercial social media organization. The leadership wants to rapidly create new methods of sharing customer data through creative linkages with mobile devices. You have voiced concern about privacy regulations but the velocity of the business is given priority. Which of the following BEST describes this organization?

Options:

Risk averse

Risk tolerant

Risk conditional

Risk minimal

Discussion

Question 22

A CISO has recently joined an organization with a poorly implemented security program. The desire is to base the security program on a risk management approach. Which of the following is a foundational requirement in order to initiate this type of program?

Options:

A security organization that is adequately staffed to apply required mitigation strategies and regulatory compliance solutions

A clear set of security policies and procedures that are more concept-based than controls-based

A complete inventory of Information Technology assets including infrastructure, networks, applications and data

A clearly identified executive sponsor who will champion the effort to ensure organizational buy-in

Discussion

Question 23

Which of the following methods are used to define contractual obligations that force a vendor to meet customer expectations?

Options:

Terms and Conditions

Service Level Agreements (SLA)

Statement of Work