最新の512-50問題集で試験を準備する

EC-COUNCIL 512-50 試験概要:

EC-COUNCIL 512-50 試験シラバストピック:

EC-COUNCIL EC-Council Information Security Manager (E|ISM) 認定 512-50 試験問題：

1. With a focus on the review and approval aspects of board responsibilities, the Data Governance Council recommends that the boards provide strategic oversight regarding information and information security, include these four things:

A) Annual security training for all employees, continual budget reviews, endorsement of the development and implementation of a security program, metrics to track the program
B) Understanding criticality of information and information security, review investment in information security, endorse development and implementation of a security program, and require regular reports on adequacy and effectiveness
C) Endorsement by the board of directors for security program, metrics of security program milestones, annual budget review, report on integration and acceptance of program
D) Metrics tracking security milestones, understanding criticality of information and information security, visibility into the types of information and how it is used, endorsement by the board of directors

2. If the result of an NPV is positive, then the project should be selected. The net present value shows the present value of the project, based on the decisions taken for its selection. What is the net present value equal to?

A) Net profit - per capita income
B) Total investment - Discounted cash
C) Initial investment - Future value
D) Average profit - Annual investment

3. Which of the following most commonly falls within the scope of an information security governance steering committee?

A) Interviewing candidates for information security specialist positions
B) Vetting information security policies
C) Developing content for security awareness programs
D) Approving access to critical financial systems

4. An application vulnerability assessment has identified a security flaw in an application. This is a flaw that was previously identified and remediated on a prior release of the application. Which of the following is MOST likely the reason for this recurring issue?

A) Lack of version/source controls
B) Lack of change management controls
C) Ineffective configuration management controls
D) High turnover in the application development department

5. A global retail organization is looking to implement a consistent Disaster Recovery and Business Continuity Process across all of its business units. Which of the following standards and guidelines can BEST address this organization's need?

A) International Organization for Standardizations - 27005 (ISO-27005)
B) International Organization for Standardizations - 22301 (ISO-22301)
C) Information Technology Infrastructure Library (ITIL)
D) Payment Card Industry Data Security Standards (PCI-DSS)

質問と回答：