最新の512-50問題集で試験を準備する

EC-COUNCIL 512-50 試験概要:

EC-COUNCIL 512-50 試験シラバストピック:

EC-COUNCIL EC-Council Information Security Manager (E|ISM) 認定 512-50 試験問題：

1. The Security Operations Center (SOC) just purchased a new intrusion prevention system (IPS) that needs to be deployed in-line for best defense. The IT group is concerned about putting the new IPS in-line because it might negatively impact network availability. What would be the BEST approach for the CISO to reassure the IT group?

A) Explain to the IT group that this is a business need and the IPS will fail open however, if there is a network failure the CISO will accept responsibility
B) Work with the IT group and tell them to put IPS in-line and say it won't cause any network impact
C) Explain to the IT group that the IPS will fail open once in-line however it will be deployed in monitor mode for a set period of time to ensure that it doesn't block any legitimate traffic
D) Explain to the IT group that the IPS won't cause any network impact because it will fail open

2. Scenario: You are the CISO and have just completed your first risk assessment for your organization. You find many risks with no security controls, and some risks with inadequate controls. You assign work to your staff to create or adjust existing security controls to ensure they are adequate for risk mitigation needs.
When formulating the remediation plan, what is a required input?

A) Board of directors
B) Patching history
C) Latest virus definitions file
D) Risk assessment

3. Risk that remains after risk mitigation is known as

A) Persistent risk
B) Residual risk
C) Non-tolerated risk
D) Accepted risk

4. According to ISO 27001, of the steps for establishing an Information Security Governance program listed below, which comes first?

A) Decide how to manage risk
B) Define the budget of the Information Security Management System
C) Define Information Security Policy
D) Identify threats, risks, impacts and vulnerabilities

5. A department within your company has proposed a third party vendor solution to address an urgent, critical business need. As the CISO you have been asked to accelerate screening of their security control claims.
Which of the following vendor provided documents is BEST to make your decision:

A) Vendor provided attestation of the detailed security controls from a reputable accounting firm
B) Vendor provided internal risk assessment and security control documentation
C) Vendor provided reference from an existing reputable client detailing their implementation
D) Vendor's client list of reputable organizations currently using their solution

質問と回答：