EC-COUNCIL EC-Council Information Security Manager (E|ISM)

QUESTION NO: 1
Which of the following set of processes is considered to be one of the cornerstone cycles of the International Organization for Standardization (ISO) 27001 standard?

A. Plan-Do-Check-Act B. Plan-Check-Do-Act C. Plan-Select-Implement-Evaluate D. SCORE (Security Consensus Operational Readiness Evaluation)

Correct Answer: A

QUESTION NO: 2
Which of the following has the GREATEST impact on the implementation of an information security governance model?

A. Distance between physical locations B. Complexity of organizational structure C. Organizational budget D. Number of employees

Correct Answer: B

QUESTION NO: 3
The PRIMARY objective of security awareness is to:

A. Ensure that security policies are read. B. Put employees on notice in case follow-up action for noncompliance is necessary C. Meet legal and regulatory requirements. D. Encourage security-conscious employee behavior.

Correct Answer: D

QUESTION NO: 4
Which of the following is the MOST logical method of deploying security controls within an organization?

A. Obtain funding for all desired controls and then create project plans for implementation B. Apply the least costly controls to demonstrate positive program activity C. Obtain business unit buy-in through close communication and coordination D. Apply the simpler controls as quickly as possible and use a risk-based approach for the more difficult and costly controls

Correct Answer: D

QUESTION NO: 5
The alerting, monitoring and life-cycle management of security related events is typically handled by the

A. governance, risk, and compliance tools B. risk assessment process C. risk management process D. security threat and vulnerability management process

Correct Answer: D

QUESTION NO: 6
A newly-hired CISO needs to understand the organization's financial management standards for business units and operations. Which of the following would be the best source of this information?

A. The external financial audit service B. The internal accounting department C. The managers of the accounts payables and accounts receivables teams D. The Chief Financial Officer (CFO)

Correct Answer: C

QUESTION NO: 7
Dataflow diagrams are used by IT auditors to:

A. Graphically summarize data paths and storage processes. B. Order data hierarchically. C. Portray step-by-step details of data generation. D. Highlight high-level data definitions.

Correct Answer: A

QUESTION NO: 8
Which of the following defines the boundaries and scope of a risk assessment?

A. The risk assessment schedule B. The risk assessment framework C. The risk assessment charter D. The assessment context

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 9
The PRIMARY objective for information security program development should be:

A. Reducing the impact of the risk to the business. B. Establishing strategic alignment with business continuity requirements C. Identifying and implementing the best security solutions. D. Establishing incident response programs.

Correct Answer: A

EC-COUNCIL EC-Council Information Security Manager (E|ISM) - 512-50 Exam Questions