EC-Council 512-50 Dumps PDF Free Download - Page: 8

QUESTION: 36 Exam Topic: 1, Governance, Risk, Compliance

Quantitative Risk Assessments have the following advantages over qualitative risk assessments:

They are objective and can express risk / cost in real numbers
They are subjective and can be completed more quickly
They are objective and express risk / cost in approximates
They are subjective and can express risk /cost in real numbers

Answer(s): A

Reveal Solution Next Question

QUESTION: 37 Exam Topic: 1, Governance, Risk, Compliance

Which of the following is MOST important when dealing with an Information Security Steering committee:

Include a mix of members from different departments and staff levels.
Ensure that security policies and procedures have been vetted and approved.
Review all past audit and compliance reports.
Be briefed about new trends and products at each meeting by a vendor.

Answer(s): C

Reveal Solution Next Question

QUESTION: 38 Exam Topic: 1, Governance, Risk, Compliance

A business unit within your organization intends to deploy a new technology in a manner that places it in violation of existing information security standards.
What immediate action should the information security manager take?

Enforce the existing security standards and do not allow the deployment of the new technology.
Amend the standard to permit the deployment.
If the risks associated with that technology are not already identified, perform a risk analysis to quantify the risk, and allow the business unit to proceed based on the identified risk level.
Permit a 90-day window to see if an issue occurs and then amend the standard if there are no issues.

Answer(s): C

Reveal Solution Next Question