712-50 試験問題を無料オンラインアクセス

Risk that remains after risk mitigation is known as

• A.Non-tolerated risk
• B.Persistent risk
• C.Accepted risk
• D.Residual risk

In which of the following cases would an organization be more prone to risk acceptance vs. risk mitigation?

• A.The organization uses exclusively a qualitative process to measure risk
• B.The organization's risk tolerance is low
• C.The organization uses exclusively a quantitative process to measure risk
• D.The organization's risk tolerance is high

An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System. Which of the following international standards can BEST assist this organization?

• A.Control Objectives for Information Technology (COBIT)
• B.International Organization for Standardizations - 27005 (ISO-27005)
• C.International Organization for Standardizations - 27004 (ISO-27004)
• D.Payment Card Industry Data Security Standards (PCI-DSS)

Which business stakeholder is accountable for the integrity of a new information system?

• A.CISO
• B.Board of directors
• C.Compliance Officer
• D.Project manager

When managing a project, the MOST important activity in managing the expectations of stakeholders is:

• A.To facilitate proper communication regarding outcomes
• B.To finalize detailed scope of the project at project initiation
• C.To force stakeholders to commit ample resources to support the project
• D.To assure stakeholders commit to the project start and end dates in writing