EC-Council Information Security Manager (E|ISM)

Question 1

As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building.
Below your office window you notice a door that is normally propped open during the day for groups of people to take breaks outside. Upon looking closer you see there is no badge reader. What should you do?

A. Close and chain the door shut and send a company-wide memo banning the practice.

B. Post a guard at the door to maintain physical security

C. Nothing, this falls outside your area of influence.

D. Have a risk assessment performed.

Correct Answer: D

Question 2

Which of the following represents the BEST reason for an organization to use the Control Objectives for Information and Related Technology (COBIT) as an Information Technology (IT) framework?

A. Implementation of it eases an organization's auditing and compliance burden

B. It provides for a consistent and repeatable staffing model for technology organizations

C. Information Security (IS) procedures often require augmentation with other standards

D. It allows executives to more effectively monitor IT implementation costs

Correct Answer: A

Question 3

As the Risk Manager of an organization, you are task with managing vendor risk assessments. During the assessment, you identified that the vendor is engaged with high profiled clients, and bad publicity can jeopardize your own brand.
Which is the BEST type of risk that defines this event?

A. Operational Risk

B. Compliance Risk

C. Strategic Risk

D. Reputation Risk

Correct Answer: D

Question 4

What are the three stages of an identity and access management system?

A. Provision, Administration, Enforcement

B. Administration, Validation, Protect

C. Authentication, Authorize, Validation

D. Provision, Administration, Authentication

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

You work as a project manager for TYU project. You are planning for risk mitigation. You need to quickly identify high-level risks that will need a more in-depth analysis. Which of the following activities will help you in this?

A. Risk mitigation

B. Estimate activity duration

C. Qualitative analysis

D. Quantitative analysis

Correct Answer: C

Question 6

A recent audit has identified a few control exceptions and is recommending the implementation of technology and processes to address the finding. Which of the following is the MOST likely reason for the organization to reject the implementation of the recommended technology and processes?

A. The risk tolerance of the organization permits this risk

B. The auditors have not followed proper auditing processes

C. The organization has purchased cyber insurance

D. The CIO of the organization disagrees with the finding

Correct Answer: A

Question 7

Quantitative Risk Assessments have the following advantages over qualitative risk assessments:

A. They are objective and express risk / cost in approximates

B. They are subjective and can express risk /cost in real numbers

C. They are objective and can express risk / cost in real numbers

D. They are subjective and can be completed more quickly

Correct Answer: C

Question 8

Which of the following best describes the sensors designed to project and detect a light beam across an area?

A. Smoke

B. Air-aspirating

C. Photo electric

D. Thermal

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 9

What should an organization do to ensure that they have a sound Business Continuity (BC) Plan?

A. Conduct periodic tabletop exercises to refine the BC plan

B. Test every three years to ensure that things work as planned

C. Conduct a Disaster Recovery (DR) exercise every year to test the plan

D. Outsource the creation and execution of the BC plan to a third party vendor

Correct Answer: A

EC-COUNCIL EC-Council Information Security Manager (E|ISM) - 512-50 Exam Practice Test

Latest Update

Useful Links

Contact Us