Free Cram & Latest Exams Dumps

QUESTION 36
Which of the following international standards can be BEST used to define a Risk Management process in an organization?

QUESTION 37
What organizational structure combines the functional and project structures to create a hybrid of the two?

QUESTION 38
Which of the following should be determined while defining risk management strategies?

QUESTION 39
File Integrity Monitoring (FIM) is considered a

QUESTION 40
IT control objectives are useful to IT auditors as they provide the basis for understanding the:

QUESTION 41
Knowing the potential financial loss an organization is willing to suffer if a system fails is a determination of which of the following?

QUESTION 42
The ability to demand the implementation and management of security controls on third parties providing services to an organization is

QUESTION 43
What is the difference between encryption and tokenization?

QUESTION 44
You have implemented a new security control. Which of the following risk strategy options have you engaged in?

QUESTION 45
Which of the following is considered a project versus a managed process?

QUESTION 46
Which of the following is a term related to risk management that represents the estimated frequency at which a threat is expected to transpire?

QUESTION 47
An organization’s firewall technology needs replaced. A specific technology has been selected that is less costly than others and lacking in some important capabilities. The security officer has voiced concerns about sensitive data breaches but the decision is made to purchase. What does this selection indicate?

QUESTION 48
When managing an Information Security Program, which of the following is of MOST importance in order to influence the culture of an organization?

QUESTION 49
Information Security is often considered an excessive, after-the-fact cost when a project or initiative is completed. What can be done to ensure that security is addressed cost effectively?

QUESTION 50
The organization does not have the time to remediate the vulnerability; however it is critical to release the application. Which of the following needs to be further evaluated to help mitigate the risks?

QUESTION 51
You work as a project manager for TYU project. You are planning for risk mitigation. You need to quickly identify high-level risks that will need a more in-depth analysis.
Which one of the following approaches would you use?

QUESTION 52
Your company has limited resources to spend on security initiatives. The Chief Financial Officer asks you to prioritize the protection of information resources based on their value to the company. It is essential that you be able to communicate in language that your fellow executives will understand.
You should:

QUESTION 53
This occurs when the quantity or quality of project deliverables is expanded from the original project plan.

QUESTION 54
When choosing a risk mitigation method what is the MOST important factor?