512-50試験無料問題集（402題）「EC-COUNCIL EC-Council Information Security Manager (E|ISM) 認定」

出題：1

An organization's Information Security Policy is of MOST importance because

A. it defines a process to meet compliance requirements

B. it communicates management's commitment to protecting information resources

C. it establishes a framework to protect confidential information

D. it is formally acknowledged by all employees and vendors

正解：B 解答を投票する

出題：2

Scenario: As you begin to develop the program for your organization, you assess the corporate culture and determine that there is a pervasive opinion that the security program only slows things down and limits the performance of the "real workers." What must you do first in order to shift the prevailing opinion and reshape corporate culture to understand the value of information security to the organization?

A. Cite compliance with laws, statutes, and regulations - explaining the financial implications for the company for non-compliance

B. Understand the business and focus your efforts on enabling operations securely

C. Draw from your experience and recount stories of how other companies have been compromised

D. Cite corporate policy and insist on compliance with audit findings

正解：B 解答を投票する

出題：3

Michael starts a new job and discovers that he has unnecessary access to a variety of systems. Which of the following best describes the problem he has encountered?

A. Least privileges

B. Excessive privileges

C. Privilege creep

D. Rights collision

正解：B 解答を投票する

出題：4

To get an Information Security project back on schedule, which of the following will provide the MOST help?

A. Stakeholder support

B. Extend work hours

C. More frequent project milestone meetings

D. Upper management support

正解：D 解答を投票する

出題：5

What is the primary reason for performing a return on investment analysis?

A. To decide between multiple vendors

B. To determine the current present value of a project

C. To decide is the solution costs less than the risk it is mitigating

D. To determine the annual rate of loss

正解：C 解答を投票する

出題：6

Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN.
What type of control is being implemented by supervisors and data owners?

A. Technical

B. Administrative

C. Operational

D. Management

正解：C 解答を投票する

出題：7

An anonymity network is a series of?

A. War driving maps

B. Government networks in Tora

C. Covert government networks

D. Virtual network tunnels

正解：D 解答を投票する

出題：8

You are just hired as the new CISO and are being briefed on all the Information Security projects that your section has on going. You discover that most projects are behind schedule and over budget.
Using the best business practices for project management you determine that the project correctly aligns with the company goals and the scope of the project is correct. What is the NEXT step?

A. Verify resources

B. Review time schedules

C. Verify constraints

D. Verify budget

正解：A 解答を投票する

出題：9

As the new CISO at the company you are reviewing the audit reporting process and notice that it includes only detailed technical diagrams. What else should be in the reporting process?

A. Names and phone numbers of those who conducted the audit

B. Business charter

C. Penetration test agreement

D. Executive summary

正解：D 解答を投票する

512-50試験無料問題集「EC-COUNCIL EC-Council Information Security Manager (E|ISM) 認定」