712-50 Exam Questions – Real & Updated Questions PDF [Q54-Q78]

4.7/5 - (3 votes)

712-50 Exam Questions – Real & Updated Questions PDF

Pass Guaranteed Quiz 2022 Realistic Verified Free EC-COUNCIL

EC-Council CCISO Exam Certification Details:

Exam Name	EC-Council Certified Chief Information Security Officer (CCISO)
Duration	150 mins
Books / Training	Courseware
Exam Code	712-50
Passing Score	72%

NEW QUESTION 54
When would it be more desirable to develop a set of decentralized security policies and procedures within an enterprise environment?

When there is a need to develop a more unified incident response capability.

When the enterprise is made up of many business units with diverse business activities, risks profiles and regulatory requirements.

When there is a variety of technologies deployed in the infrastructure.

When it results in an overall lower cost of operating the security program.

ECCouncil 712-50 : Practice Test

NEW QUESTION 55
IT control objectives are useful to IT auditors as they provide the basis for understanding the:

The audit control checklist

Technique for securing information

Desired results or purpose of implementing specific control procedures.

Security policy

NEW QUESTION 56
When dealing with Security Incident Response procedures, which of the following steps come FIRST when reacting to an incident?

Escalation

Recovery

Eradication

Containment

NEW QUESTION 57
As the CISO for your company you are accountable for the protection of information resources commensurate with:

Customer demand

Cost and time to replace

Insurability tables

Risk of exposure

NEW QUESTION 58
When operating under severe budget constraints a CISO will have to be creative to maintain a strong security organization. Which example below is the MOST creative way to maintain a strong security posture during these difficult times?

Download open source security tools and deploy them on your production network

Download trial versions of commercially available security tools and deploy on your production network

Download open source security tools from a trusted site, test, and then deploy on production network

Download security tools from a trusted source and deploy to production network

NEW QUESTION 59
Which of the following is considered the foundation for the Enterprise Information Security Architecture (EISA)?

Security regulations

Asset classification

Information security policy

Data classification

NEW QUESTION 60
Providing oversight of a comprehensive information security program for the entire organization is the primary responsibility of which group under the InfoSec governance framework?

Senior Executives

Office of the Auditor

Office of the General Counsel

All employees and users

NEW QUESTION 61
While designing a secondary data center for your company what document needs to be analyzed to determine to how much should be spent on building the data center?

Enterprise Risk Assessment

Disaster recovery strategic plan

Business continuity plan

Application mapping document

NEW QUESTION 62
Which wireless encryption technology makes use of temporal keys?

Wi-Fi Protected Access version 1 (WPA2)

Wireless Equivalence Protocol (WEP)

Wireless Application Protocol (WAP)

Extensible Authentication Protocol (EAP)

NEW QUESTION 63
If your organization operates under a model of “assumption of breach”, you should:

Establish active firewall monitoring protocols

Purchase insurance for your compliance liability

Focus your security efforts on high value assets

Protect all information resource assets equally

NEW QUESTION 64
Which of the following is critical in creating a security program aligned with an organization’s goals?

Ensure security budgets enable technical acquisition and resource allocation based on internal compliance requirements

Develop a culture in which users, managers and IT professionals all make good decisions about information risk

Provide clear communication of security program support requirements and audit schedules

Create security awareness programs that include clear definition of security program goals and charters

NEW QUESTION 65
The success of the Chief Information Security Officer is MOST dependent upon:

favorable audit findings

following the recommendations of consultants and contractors

development of relationships with organization executives

raising awareness of security issues with end users

NEW QUESTION 66
Bob waits near a secured door, holding a box. He waits until an employee walks up to the secured door and uses the special card in order to access the restricted area of the target company. Just as the employee opens the door, Bob walks up to the employee (still holding the box) and asks the employee to hold the door open so that he can enter. What is the best way to undermine the social engineering activity of tailgating?

Post a sign that states, “no tailgating” next to the special card reader adjacent to the secure door

Issue special cards to access secure doors at the company and provide a one-time only brief description of use of the special card

Educate and enforce physical security policies of the company to all the employees on a regular basis

Setup a mock video camera next to the special card reader adjacent to the secure door

Explanation/Reference:

NEW QUESTION 67
The Information Security Management program MUST protect:

Against distributed denial of service attacks

Intellectual property released into the public domain

all organizational assets

critical business processes and/or revenue streams

NEW QUESTION 68
Scenario: You are the newly hired Chief Information Security Officer for a company that has not previously had a senior level security practitioner. The company lacks a defined security policy and framework for their Information Security Program. Your new boss, the Chief Financial Officer, has asked you to draft an outline of a security policy and recommend an industry/sector neutral information security control framework for implementation.
Which of the following industry / sector neutral information security control frameworks should you recommend for implementation?

National Institute of Standards and Technology (NIST) Special Publication 800-53

Payment Card Industry Digital Security Standard (PCI DSS)

International Organization for Standardization – ISO 27001/2

British Standard 7799 (BS7799)

NEW QUESTION 69
What role should the CISO play in properly scoping a PCI environment?

Validate the business units’ suggestions as to what should be included in the scoping process

Work with a Qualified Security Assessor (QSA) to determine the scope of the PCI environment

Ensure internal scope validation is completed and that an assessment has been done to discover all credit card data

Complete the self-assessment questionnaire and work with an Approved Scanning Vendor (ASV) to determine scope

NEW QUESTION 70
In MOST organizations which group periodically reviews network intrusion detection system logs for all systems as part of their daily tasks?

Internal Audit

Database Administration

Information Security

Compliance

NEW QUESTION 71
Which of the following best represents a calculation for Annual Loss Expectancy (ALE)?

Value of the asset multiplied by the loss expectancy

Replacement cost multiplied by the single loss expectancy

Single loss expectancy multiplied by the annual rate of occurrence

Total loss expectancy multiplied by the total loss frequency

Explanation/Reference:

NEW QUESTION 72
Physical security measures typically include which of the following components?

Physical, Technical, Operational

Technical, Strong Password, Operational

Operational, Biometric, Physical

Strong password, Biometric, Common Access Card

NEW QUESTION 73
In terms of supporting a forensic investigation, it is now imperative that managers, firstresponders, etc., accomplish the following actions to the computer under investigation:

Immediately place hard drive and other components in an anti-static bag

Secure the area and attempt to maintain power until investigators arrive

Secure the area and shut down the computer until investigators arrive

Secure the area

NEW QUESTION 74
Within an organization’s vulnerability management program, who has the responsibility to implement remediation actions?

Data owner

Security officer

Vulnerability engineer

System administrator

NEW QUESTION 75
Security related breaches are assessed and contained through which of the following?

The IT support team.

A forensic analysis.

Incident response

Physical security team.

NEW QUESTION 76
From the CISO’s perspective in looking at financial statements, the statement of retained earnings of an organization:

Has a direct correlation with the CISO’s budget

Represents, in part, the savings generated by the proper acquisition and implementation of security controls

Represents the sum of all capital expenditures

Represents the percentage of earnings that could in part be used to finance future security controls

NEW QUESTION 77
After a risk assessment is performed, a particular risk is considered to have the potential of costing the organization 1.2 Million USD. This is an example of

Risk Tolerance

Qualitative risk analysis

Risk Appetite

Quantitative risk analysis

NEW QUESTION 78
What is the main purpose of the Incident Response Team?

Communicate details of information security incidents

Create effective policies detailing program activities

Ensure efficient recovery and reinstate repaired systems

Provide current employee awareness programs

Loading …

EC-Council Certified CISO 712-50 Exam

EC-Council Certified CISO 712-50 Exam which is related to EC-Council Certified CISO certification. This 712-50 exam validates the ability to a candidate to implement, manage and maintain an information security governance program, Coordinate the application of information security strategies, plans, policies, and procedures to reduce regulatory risk, control Information Security Management, Identify, negotiate and manage vendor agreement and community, Identify the basic network architecture, models, protocols and components such as routers and hubs that play a role in network security.

Get to the Top with 712-50 Practice Exam Questions: https://www.testsimulate.com/712-50-study-materials.html

EC-Council CCISO Exam Certification Details:

EC-Council Certified CISO 712-50 Exam

Leave a Reply Cancel reply