Home Tech 712-50 EC-Council Certified CISO (CCISO) Exam

712-50 EC-Council Certified CISO (CCISO) Exam

By
Lindsay

With
Comments Off

QUESTION 1
When briefing senior management on the creation of a governance process, the MOST important aspect should be:

A. knowledge required to analyze each issue
B. information security metrics
C. linkage to business area objectives
D. baseline against which metrics are evaluated

Answer: C

QUESTION 2
Which of the following should be determined while defining risk management strategies?

A. Organizational objectives and risk tolerance
B. Enterprise disaster recovery plans
C. Risk assessment criteria
D. IT architecture complexity

Answer: A

QUESTION 3
Which of the following is the MOST important benefit of an effective security governance process?

A. Senior management participation in the incident response process
B. Better vendor management
C. Reduction of security breaches
D. Reduction of liability and overall risk to the organization

Answer: D

QUESTION 4
A global retail organization is looking to implement a consistent Disaster Recovery and Business Continuity Process across all of its business units.
Which of the following standards and guidelines can BEST address this organization’s need?

A. International Organization for Standardizations – 22301 (ISO-22301)
B. Information Technology Infrastructure Library (ITIL)
C. Payment Card Industry Data Security Standards (PCI-DSS)
D. International Organization for Standardizations – 27005 (ISO-27005)

Answer: A

QUESTION 5
A security manager regularly checks work areas after business hours for security violations; such as unsecured files or unattended computers with active sessions.
This activity BEST demonstrates what part of a security program?

A. Compliance management
B. Audit validation
C. Physical control testing
D. Security awareness training

Answer: A