Latest 712-50 Dumps (V12.02) for EC-Council Certified CISO (CCISO) Exam Preparation – Study 712-50 Free Dumps (Part 1, Q1-Q40) First

1. Which of the following is the MOST effective method to measure the effectiveness of security controls in a perimeter network?

2. How often should the Statements of Standards for Attestation Engagements-16 (SSAE16)/International Standard on Assurance Engagements 3402 (ISAE3402) report of your vendors be reviewed?

3. Why is it crucial to engage legal assistance when acquiring new products and services?

4. IT control objectives are useful to IT auditors as they provide the basis for understanding the:

5. Which of the following is MOST likely to be discretionary?

6. Which of the following is the MAIN security concern for public cloud computing?

7. The Board of Directors of a publicly-traded company is concerned about the security implications of a strategic project that will migrate 50% of the organization’s information technology assets to the cloud. They have requested a briefing on the project plan and a progress report of the security stream of the project. As the CISO, you have been tasked with preparing the report for the Chief Executive Officer to present.

Using the Earned Value Management (EVM), what does a Cost Variance (CV) of -1,200 mean?

8. Which of the following is critical in creating a security program aligned with an organization’s goals?

9. What is the definition of Risk in Information Security?

10. The security team has investigated the theft/loss of several unencrypted laptop computers containing sensitive corporate information. To prevent the loss of any additional corporate data it is unilaterally decided by the CISO that all existing and future laptop computers will be encrypted. Soon, the help desk is flooded with complaints about the slow performance of the laptops and users are upset.

What did the CISO do wrong? (choose the BEST answer):

11. What does the information security program primarily protect?

12. Devising controls for information security is a balance between?

13. SCENARIO: Critical servers show signs of erratic behavior within your organization’s intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team.

During initial investigation, the team suspects criminal activity but cannot initially prove or disprove illegal actions.

What is the MOST critical aspect of the team’s activities?

14. Involvement of senior management is MOST important in the development of:

15. What term BEST describes assuring the actions of employees, applications, and systems follow the organization's rules and regulations?

16. Developing effective security controls is a balance between:

17. What is the MOST critical output of the incident response process?

18. With respect to the audit management process, management response serves what function?

19. Which of the following BEST describes countermeasures that minimize risk?

20. Which of the following conditions would be the MOST probable reason for a security project to be rejected by the executive board of an organization?

21. Most of your security projects are behind schedule and over budget, but they align with the security program goals and are correctly scoped.

What should you do next?

22. At which point should the identity access management team be notified of the termination of an employee?

23. Which regulation or policy governs protection of personally identifiable user data gathered during a cyber investigation?

24. What is the GREATEST benefit of having an effective security governance process?

25. Assigning the role and responsibility of Information Assurance to a dedicated and independent security group is an example of:

26. Which of the following are necessary to formulate responses to external audit findings?

27. Which of the following is a major benefit of applying risk levels?

28. Step-by-step procedures to regain normalcy in the event of a major earthquake is PRIMARILY covered by which of the following plans?

29. Which of the following is a countermeasure to prevent unauthorized database access from web applications?

30. The framework that helps to define a minimum standard of protection that business stakeholders must attempt to achieve is referred to as a standard of:

31. The formal certification and accreditation process has four primary steps, what are they?

32. A key cybersecurity feature of a Personal Identification Verification (PIV) Card is:

33. What is the MAIN responsibility of the purple security testing team?

34. The Information Security Governance program MUST:

35. A recommended method to document the respective roles of groups and individuals for a given process is to:

36. Scenario: You are the newly hired Chief Information Security Officer for a company that has not previously had a senior level security practitioner. The company lacks a defined security policy and framework for their Information Security Program. Your new boss, the Chief Financial Officer, has asked you to draft an outline of a security policy and recommend an industry/sector neutral information security control framework for implementation.

Which of the following industry / sector neutral information security control frameworks should you recommend for implementation?

37. Which of the following best represents a calculation for Annual Loss Expectancy (ALE)?

38. How is an Annual Loss Expectancy (ALE) calculated?

39. A CISO must conduct risk assessments using a method where the Chief Financial Officer (CFO) receives impact data in financial terms to use as input to select the proper level of coverage in a new cybersecurity insurance policy.

What is the MOST effective method of risk analysis to provide the CFO with the information required?

40. When deploying an Intrusion Prevention System (IPS) the BEST way to get maximum protection from the system is to deploy it