Eccouncil 512-50 EISM Exam Questions Instant Access

Question 1

Regulatory requirements typically force organizations to implement

AMandatory controls

BDiscretionary controls

COptional controls

DFinancial controls

Answer : A

Question 2

A CISO implements smart cards for credential management, and as a result has reduced costs associated with help desk operations supporting password resets. This demonstrates which of the following principles?

ASecurity alignment to business goals

BRegulatory compliance effectiveness

CIncreased security program presence

DProper organizational policy enforcement

Answer : A

Question 3

Developing effective security controls is a balance between:

ARisk Management and Operations

BCorporate Culture and Job Expectations

COperations and Regulations

DTechnology and Vendor Management

Answer : A

Question 4

Scenario: Your program is developed around minimizing risk to information by focusing on people, technology, and operations.

You have decided to deal with risk to information from people first. How can you minimize risk to your most sensitive information before granting access?

AConduct background checks on individuals before hiring them

BDevelop an Information Security Awareness program

CMonitor employee browsing and surfing habits

DSet your firewall permissions aggressively and monitor logs regularly.

Answer : A

Question 5

When a CISO considers delaying or not remediating system vulnerabilities which of the following are MOST important to take into account?

AThreat Level, Risk of Compromise, and Consequences of Compromise

BRisk Avoidance, Threat Level, and Consequences of Compromise

CRisk Transfer, Reputational Impact, and Consequences of Compromise

DReputational Impact, Financial Impact, and Risk of Compromise

Answer : A

Question 6

Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.

Which of the following frameworks and standards will BEST fit the organization as a baseline for their security program?

ANIST and Privacy Regulations

BISO 27000 and Payment Card Industry Data Security Standards

CNIST and data breach notification laws

DISO 27000 and Human resources best practices

Answer : B

Question 7

Security related breaches are assessed and contained through which of the following?

AThe IT support team.

BA forensic analysis.

CIncident response

DPhysical security team.

Answer : C

Eccouncil Information Security Manager 512-50 EISM Exam Questions