File Info
| Exam | EC-Council Certified CISO |
| Number | 712-50 |
| File Name | ECCouncil.712-50.Pass4Sure.2019-12-16.211q.vcex |
| Size | 165 KB |
| Posted | Dec 16, 2019 |
| Download | ECCouncil.712-50.Pass4Sure.2019-12-16.211q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
When briefing senior management on the creation of a governance process, the MOST important aspect should be:
- knowledge required to analyze each issue
- information security metrics
- linkage to business area objectives
- baseline against which metrics are evaluated
Correct answer: C
Question 2
Which of the following should be determined while defining risk management strategies?
- Organizational objectives and risk tolerance
- Enterprise disaster recovery plans
- Risk assessment criteria
- IT architecture complexity
Correct answer: A
Question 3
A security manager regularly checks work areas after business hours for security violations; such as unsecured files or unattended computers with active sessions.
This activity BEST demonstrates what part of a security program?
- Compliance management
- Audit validation
- Physical control testing
- Security awareness training
Correct answer: A
Question 4
Which of the following is the MAIN reason to follow a formal risk management process in an organization that hosts and uses privately identifiable information (PII) as part of their business models and processes?
- Need to comply with breach disclosure laws
- Fiduciary responsibility to safeguard credit information
- Need to transfer the risk associated with hosting PII data
- Need to better understand the risk associated with using PII data
Correct answer: D
Question 5
A method to transfer risk is to______________.
- Implement redundancy
- Move operations to another region
- Alignment with business operations
- Purchase breach insurance
Correct answer: D
Question 6
An organization licenses and uses personal information for business operations, and a server containing that information has been compromised.
What kind of law would require notifying the owner or licensee of this incident?
- Consumer right disclosure
- Data breach disclosure
- Special circumstance disclosure
- Security incident disclosure
Correct answer: B
Question 7
The PRIMARY objective of security awareness is to:
- Encourage security-conscious behavior
- Put employees on notice in case follow-up action for noncompliance is necessary
- Ensure that security policies are read.
Correct answer: A
Question 8
Which of the following is MOST likely to be discretionary?
- Policies
- Procedures
- Guidelines
- Standards
Correct answer: C
Question 9
When dealing with Security Incident Response procedures, which of the following steps come FIRST when reacting to an incident?
- Eradication
- Escalation
- Containment
- Recovery
Correct answer: C
Question 10
What is the relationship between information protection and regulatory compliance?
- That all information in an organization must be protected equally.
- The information required to be protected by regulatory mandate does not have to be identified in the organizations data classification policy.
- There is no relationship between the two.
- That the protection of some information such as National ID information is mandated by regulation and other information such as trade secrets are protected based on business need.
Correct answer: D
