Get Full Version of the Examhttp://www.EnsurePass.com/712-50.html Question No.331Scenario: As you begin to develop the program for your organization, you assess the corporate culture and determine that there is a pervasive opinion that the security program only slows things down and limits the performance of the quot;real workers.quot; What must you do first in order to shift the prevailing opinion and reshape corporate culture to understand the value of information security to the organization?Cite Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/712-50.html Question No.311What is the BEST reason for having a formal request for proposal process?Creates a timeline for purchasing and budgetingAllows small companies to compete with larger companiesClearly identifies risks and benefits before funding is spentInforms suppliers a company is going to make a purchaseCorrect Answer: C Question No.312Scenario: An organization has made a decision to address Information Security formally and consistently Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/712-50.html Question No.301Which of the following is considered the foundation for the Enterprise Information Security Architecture (EISA)?Security regulationsAsset classificationInformation security policyData classificationCorrect Answer: C Question No.302Access Control lists (ACLs), Firewalls, and Intrusion Prevention Systems are examples ofNetwork based security preventative controlsSoftware segmentation controlsNetwork based security detective Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/712-50.html Question No.291Scenario: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified. The CISO has validated audit findings, determined if compensatingcontrols exist, and started initial remediation Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/712-50.html Question No.281When analyzing and forecasting a capital expense budget what are not included?Network connectivity costsNew datacenter to operate fromUpgrade of mainframePurchase of new mobile devices to improve operationsCorrect Answer: A Question No.282Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates. What is one proven method Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/712-50.html Question No.271When creating contractual agreements and procurement processes why should security requirements be included?To make sure they are added on after the process is completedTo make sure the costs of security is included and understoodTo make sure the security process aligns with the vendor#39;s security processTo make sure the patching process is included with the costsCorrect Answer: B Question No.272Scenario: An organization Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/712-50.html Question No.261What is the term describing the act of inspecting all real-time Internet traffic (i.e., packets) traversing a major Internet backbone without introducing any apparent latency?Traffic AnalysisDeep-Packet inspectionPacket samplingHeuristic analysisCorrect Answer: B Question No.262The process of identifying and classifying assets is typically included in theThreat analysis processAsset configuration management processBusiness Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/712-50.html Question No.251SQL injection is a very popular and successful injection attack method. Identify the basic SQL injection text:A. ` o 1=1 - -B. /../../../../quot;DROPTABLE USERNAMEquot;NOPSCorrect Answer: A Question No.252An anonymity network is a series of?Covert government networksWar driving mapsGovernment networks in ToraVirtual network tunnelsCorrect Answer: D Question No.253Network Forensics is the prerequisite for any successful Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/712-50.html Question No.241The process of creating a system which divides documents based on their security level to manage access to private data is known assecurity codingdata security systemdata classificationprivacy protectionCorrect Answer: C Question No.242One of your executives needs to send an important and confidential email. You want to ensure that the message cannot be read by anyone but the recipient. Which of the following keys Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/712-50.html Question No.231When considering using a vendor to help support your security devices remotely, what is the BEST choice for allowing access?Vendors uses their own laptop and logins with same admin credentials your security team usesVendor uses a company supplied laptop and logins using two factor authentication with same admin credentials your security team usesVendor uses a company supplied laptop and logins using two factor authentication Read more [...]

Continue Reading

Get Full Version of the Examhttp://www.EnsurePass.com/712-50.html Question No.221The security team has investigated the theft/loss of several unencrypted laptop computers containing sensitive corporate information. To prevent the loss of any additional corporate data it is unilaterally decided by the CISO that all existing and future laptop computers will be encrypted. Soon, the help desk is flooded with complaints about the slow performance of the laptops and users are upset. What did the CISO Read more [...]

Continue Reading