Oct 09, 2021 Step by Step Guide to Prepare for 712-50 Exam BrainDumps

CCISO 712-50 Real Exam Questions and Answers FREE Updated on 2021

NEW QUESTION 97
A system was hardened at the Operating System level and placed into the production environment. Months later an audit was performed and it identified insecure configuration different from the original hardened state. Which of the following security issues is the MOST likely reason leading to the audit findings?

• A. Lack of proper access controls
• B. Lack of change management processes
• C. Lack of asset management processes
• D. Lack of hardening standards

Answer: B

 

NEW QUESTION 98
You currently cannot provide for 24/7 coverage of your security monitoring and incident response duties and your company is resistant to the idea of adding more full-time employees to the payroll. Which combination of solutions would help to provide the coverage needed without the addition of more dedicated staff? (choose the best answer):

• A. Employ an assumption of breach protocol and defend only essential information resources
• B. Deploy a SEIM solution and have current staff review incidents first thing in the morning
• C. Configure your syslog to send SMS messages to current staff when target events are triggered
• D. Contract with a managed security provider and have current staff on recall for incident response

Answer: D

 

NEW QUESTION 99
Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.
From an Information Security Leadership perspective, which of the following is a MAJOR concern about the CISO's approach to security?

• A. IT security centric agenda
• B. Lack of risk management process
• C. Compliance centric agenda
• D. Lack of sponsorship from executive management

Answer: A

 

NEW QUESTION 100
What type of attack requires the least amount of technical equipment and has the highest success rate?

• A. Social engineering
• B. War driving
• C. Shrink wrap attack
• D. Operating system attacks

Answer: A

 

NEW QUESTION 101
Which of the following set of processes is considered to be one of the cornerstone cycles of the International Organization for Standardization (ISO) 27001 standard?

• A. SCORE (Security Consensus Operational Readiness Evaluation)
• B. Plan-Do-Check-Act
• C. Plan-Check-Do-Act
• D. Plan-Select-Implement-Evaluate

Answer: B

 

NEW QUESTION 102
What type of attack requires the least amount of technical equipment and has the highest success rate?

• A. Social engineering
• B. War driving
• C. Shrink wrap attack
• D. Operating system attacks

Answer: A

 

NEW QUESTION 103
Which of the following best describes a portfolio?

• A. The portfolio is used to manage incidents and events
• B. A portfolio typically consists of several programs
• C. A portfolio delivers one specific service or program to the business
• D. The portfolio is used to manage and track individual projects

Answer: B

 

NEW QUESTION 104
Which of the following is the MOST important goal of risk management?

• A. Identifying the risk
• B. Identifying the victim of any potential exploits.
• C. Finding economic balance between the impact of the risk and the cost of the control
• D. Assessing the impact of potential threats

Answer: C

 

NEW QUESTION 105
Why is it vitally important that senior management endorse a security policy?

• A. So that external bodies will recognize the organizations commitment to security.
• B. So that employees will follow the policy directives.
• C. So that they will accept ownership for security within the organization.
• D. So that they can be held legally accountable.

Answer: C

 

NEW QUESTION 106
Which of the following are necessary to formulate responses to external audit findings?

• A. Technical Staff, Budget Authority, Management
• B. Internal Audit, Management, and Technical Staff
• C. Internal Audit, Budget Authority, Management
• D. Technical Staff, Internal Audit, Budget Authority

Answer: A

 

NEW QUESTION 107
Creating good security metrics is essential for a CISO. What would be the BEST sources for creating security metrics for baseline defenses coverage?

• A. Firewall, exchange, web server, intrusion detection system (IDS)
• B. Firewall, anti-virus console, IDS, syslog
• C. IDS, syslog, router, switches
• D. Servers, routers, switches, modem

Answer: B

 

NEW QUESTION 108
When a critical vulnerability has been discovered on production systems and needs to be fixed immediately, what is the BEST approach for a CISO to mitigate the vulnerability under tight budget constraints?

• A. Schedule an emergency meeting and request the finding to fix the issue
• B. Transfer financial resources from other critical programs
• C. Take the system off line until budget is available
• D. Deploy countermeasures and compensation controls until the budget is available

Answer: D

 

NEW QUESTION 109
Step-by-step procedures to regain normalcy in the event of a major earthquake is PRIMARILY covered by which of the following plans?

• A. Disaster recovery plan
• B. Business Continuity plan
• C. Incident response plan
• D. Damage control plan

Answer: A

 

NEW QUESTION 110
An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System. Which of the following international standards can BEST assist this organization?

• A. International Organization for Standardizations - 27005 (ISO-27005)
• B. International Organization for Standardizations - 27004 (ISO-27004)
• C. Payment Card Industry Data Security Standards (PCI-DSS)
• D. Control Objectives for Information Technology (COBIT)

Answer: B

 

NEW QUESTION 111
The ability to demand the implementation and management of security controls on third parties providing services to an organization is_________________________.

• A. Vendor management
• B. Compliance management
• C. Security Governance
• D. Disaster recovery

Answer: A

 

NEW QUESTION 112
Which business stakeholder is accountable for the integrity of a new information system?

• A. Compliance Officer
• B. CISO
• C. Project manager
• D. Board of directors

Answer: B

Explanation:
ECCouncil 712-50 : Practice Test

 

NEW QUESTION 113
The company decides to release the application without remediating the high-risk vulnerabilities. Which of the following is the MOST likely reason for the company to release the application?

• A. The company lacks the tools to perform a vulnerability assessment
• B. The company does not believe the security vulnerabilities to be real
• C. The company lacks a risk management process
• D. The company has a high risk tolerance

Answer: D

 

NEW QUESTION 114
......

Ultimate Guide to Prepare 712-50 Certification Exam for CCISO: https://www.testsimulate.com/712-50-study-materials.html