File Info
| Exam | EC-Council Certified CISO |
| Number | 712-50 |
| File Name | ECCouncil.712-50.SelfTestEngine.2019-12-04.206q.vcex |
| Size | 146 KB |
| Posted | Dec 04, 2019 |
| Download | ECCouncil.712-50.SelfTestEngine.2019-12-04.206q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which of the following should be determined while defining risk management strategies?
- Organizational objectives and risk tolerance
- Enterprise disaster recovery plans
- Risk assessment criteria
- IT architecture complexity
Correct answer: A
Question 2
A security manager regularly checks work areas after business hours for security violations; such as unsecured files or unattended computers with active sessions.
This activity BEST demonstrates what part of a security program?
- Compliance management
- Audit validation
- Physical control testing
- Security awareness training
Correct answer: A
Question 3
A method to transfer risk is to______________.
- Implement redundancy
- Move operations to another region
- Alignment with business operations
- Purchase breach insurance
Correct answer: D
Question 4
An organization licenses and uses personal information for business operations, and a server containing that information has been compromised.
What kind of law would require notifying the owner or licensee of this incident?
- Consumer right disclosure
- Data breach disclosure
- Special circumstance disclosure
- Security incident disclosure
Correct answer: B
Question 5
Why is it vitally important that senior management endorse a security policy?
- So that employees will follow the policy directives.
- So that they can be held legally accountable.
- So that external bodies will recognize the organizations commitment to security.
- So that they will accept ownership for security within the organization.
Correct answer: D
Question 6
The PRIMARY objective of security awareness is to:
- Encourage security-conscious behavior
- Put employees on notice in case follow-up action for noncompliance is necessary
- Ensure that security policies are read.
Correct answer: A
Question 7
Which of the following has the GREATEST impact on the implementation of an information security governance model?
- Complexity of organizational structure
- Distance between physical locations
- Organizational budget
- Number of employees
Correct answer: A
Question 8
What is the relationship between information protection and regulatory compliance?
- That all information in an organization must be protected equally.
- The information required to be protected by regulatory mandate does not have to be identified in the organizations data classification policy.
- There is no relationship between the two.
- That the protection of some information such as National ID information is mandated by regulation and other information such as trade secrets are protected based on business need.
Correct answer: D
Question 9
The FIRST step in establishing a security governance program is to?
- Obtain senior level sponsorship
- Conduct a workshop for all end users.
- Conduct a risk assessment.
- Prepare a security budget.
Correct answer: A
Question 10
When an organization claims it is secure because it is PCI-DSS certified, what is a good first question to ask towards assessing the effectiveness of their security program?
- How many credit records are stored?
- What is the value of the assets at risk?
- What is the scope of the certification?
- How many servers do you have?
Correct answer: C
