712-50 試験問題を無料オンラインアクセス

Who is PRIMARILY responsible for declaring a disaster and initiating processes to facilitate the recovery of critical assets in an organization?

• A.CISO
• B.Business Continuity Manager
• C.Board of Directors
• D.Chief Executive Officer (CEO)

What is the last step in the system authorization process?

• A.Getting authority to operate the system from executive management
• B.Conducting a final scan of the production system and mitigating all high-level vulnerabilities
• C.Changing the default passwords within all affected systems
• D.Connecting the systems to an Internet Service Provider (ISP) for verification

From an information security perspective, information that no longer supports the main purpose of the business should be:

• A.analyzed under the data ownership policy.
• B.assessed by a business impact analysis.
• C.protected under the information classification policy.
• D.analyzed under the retention policy

The PRIMARY objective for information security program development should be:

• A.Establishing strategic alignment with bunsiness continuity requirements
• B.Establishing incident response programs.
• C.Reducing the impact of the risk to the business.
• D.Identifying and implementing the best security solutions.

During an audit, what should the auditor do after identifying threats and potential impact?

• A.Create the audit checklist
• B.Identify and evaluate the existing controls
• C.Create a threat findings report
• D.Perform an asset classification