Question 1

Which type of scan is used on the eye to measure the layer of blood vessels?

Options :

A : Facial recognition scan

B : Iris scan

C : Signature kinetics scan

D : Retinal scan

Answer: D

Question 2

With a focus on the review and approval aspects of board responsibilities, the Data Governance Council recommends that the boards provide strategic oversight regarding information and information security, include these four things:

Options :

A : Metrics tracking security milestones, understanding criticality of information and information security, visibility into the types of information and how it is used, endorsement by the board of directors

B : Annual security training for all employees, continual budget reviews, endorsement of the development and implementation of a security program, metrics to track the program

C : Understanding criticality of information and information security, review investment in information security, endorse development and implementation of a security program, and require regular reports on adequacy and effectiveness

D : Endorsement by the board of directors for security program, metrics of security program milestones, annual budget review, report on integration and acceptance of program

Answer: C

Question 3

Which of the following is MOST important when dealing with an Information Security Steering committee:

Options :

A : Include a mix of members from different departments and staff levels.

B : Ensure that security policies and procedures have been vetted and approved.

C : Review all past audit and compliance reports.

D : Be briefed about new trends and products at each meeting by a vendor.

Answer: C

Question 4

Which of the following best describes an access control process that confirms the identity of the entity seeking

access to a logical or physical area?

Options :

A : Identification

B : Authorization

C : Authentication

D : Accountability

Answer: B

Question 5

Scenario: You are the CISO and have just completed your first risk assessment for your organization. You find many risks with no security controls, and some risks with inadequate controls. You assign work to your staff to create or adjust existing security controls to ensure they are adequate for risk mitigation needs.
When formulating the remediation plan, what is a required input?

Options :

A : Board of directors

B : Risk assessment

C : Patching history

D : Latest virus definitions file
Scenario6

Answer: B

Confidently Practice Online with Free 712-50 Exam Cram

Buying Options: