EC-COUNCIL EC-Council Information Security Manager (E|ISM) - 512-50 Exam Practice Test

Developing effective security controls is a balance between:

A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization. Which of the following principles does this best demonstrate?

The process of creating a system which divides documents based on their security level to manage access to private data is known as

The establishment of a formal risk management framework and system authorization program is essential. The LAST step of the system authorization process is:

Why is it vitally important that senior management endorse a security policy?

Which of the following is the BEST indicator of a successful project?

The success of the Chief Information Security Officer is MOST dependent upon:

When updating the security strategic planning document what two items must be included?

Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.
The organization has already been subject to a significant amount of credit card fraud. Which of the following is the MOST likely reason for this fraud?

A consultant is hired to do physical penetration testing at a large financial company. In the first day of his assessment, the consultant goes to the company's building dressed like an electrician and waits in the lobby for an employee to pass through the main access gate, then the consultant follows the employee behind to get into the restricted area. Which type of attack did the consultant perform?

Which of the following backup sites takes the longest recovery time?

Who is responsible for securing networks during a security incident?

As the Business Continuity Coordinator of a financial services organization, you are responsible for ensuring assets are recovered timely in the event of a disaster. Which is the BEST Disaster Recovery performance indicator to validate that you are prepared for a disaster?