512-50 Real Exam Questions

Your penetration testing team installs an in-line hardware key logger onto one of your network machines. Which of the following is of major concern to the security organization?

Which business stakeholder is accountable for the integrity of a new information system?

Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self- Service application. All employees have access to the organizational VPN. What type of control is being implemented by supervisors and data owners?

The establishment of a formal risk management framework and system authorization program is essential. The LAST step of the system authorization process is:

A security manager has created a risk program. Which of the following is a critical part of ensuring the program is successful?