712-50 by EC-COUNCIL Actual Free Exam Questions And Answers

Question 1

Which of the following is NOT an approach for ethical decision making?

A. Fairness

B. Utilitarian

C. Common good

D. Risk based

Discussion 0

Correct Answer: D Vote an answer

Question 2

A newly-hired CISO needs to understand the organization's financial management standards for business units and operations. Which of the following would be the best source of this information?

A. The Chief Financial Officer (CFO)

B. The internal accounting department

C. The managers of the accounts payables and accounts receivables teams

D. The external financial audit service

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

In order for a CISO to have true situational awareness there is a need to deploy technology that can give a real- time view of security events across the enterprise. Which tool selection represents the BEST choice to achieve situational awareness?

A. Vmware, router, switch, firewall, syslog, vulnerability management system (VMS)

B. Intrusion Detection System (IDS), firewall, switch, syslog

C. Security Incident Event Management (SIEM), IDS, router, syslog

D. SIEM, IDS, firewall, VMS

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

An IT auditor has recently discovered that because of a shortage of skilled operations personnel, the security administrator has agreed to work one late night shift a week as the senior computer operator. The most appropriate course of action for the IT auditor is to:

A. Review the system log for each of the late night shifts to determine whether any irregular actions occurred.

B. Agree to work with the security officer on these shifts as a form of preventative control.

C. Develop a computer assisted audit technique to detect instances of abuses of the arrangement.

D. Inform senior management of the risk involved.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

The BEST organization to provide a comprehensive, independent and certifiable perspective on established security controls in an environment is

A. External Audit

B. Internal Audit

C. Forensic experts

D. Penetration testers

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

You assess the corporate culture and determine there is a pervasive opinion that the security program limits business performance. What is the MOST effective approach to reshape corporate culture to adopt security as a norm?

A. Cite corporate policy and collaborate with individuals to review audit reports

B. Understand the business and focus your efforts on enabling operations securely

C. Explain how other similar organizations have been compromised

D. Communicate compliance requirements and financial penalties

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

An organization has defined a set of standard security controls. This organization has also defined the circumstances and conditions in which they must be applied. What is the NEXT logical step in applying the controls in the organization?

A. Perform an asset classification

B. Analyze existing controls on systems

C. Create an architecture gap analysis

D. Determine the risk tolerance

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 8

An international organization is planning a project to implement encryption technologies to protect company confidential information. This organization has data centers on three continents. Which of the following would be considered a MAJOR constraint for the project?

A. Time zone differences

B. Local customer privacy laws

C. Encryption import/export regulations

D. Compliance to local hiring laws

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 9

In MOST organizations which group periodically reviews network intrusion detection system logs for all systems as part of their daily tasks?

A. Database Administration

B. Internal Audit

C. Information Security

D. Compliance

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 10

SCENARIO: A CISO has several two-factor authentication systems under review and selects the one that is most sufficient and least costly. The implementation project planning is completed and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization's needs.
What is the MOST logical course of action the CISO should take?

A. Cancel the project if the business need was based on internal requirements versus regulatory compliance requirements

B. Continue with the project until the scalability issue is validated by others, such as an auditor or third party assessor

C. Continue with the implementation and submit change requests to the vendor in order to ensure required functionality will be provided when needed

D. Review the original solution set to determine if another system would fit the organization's risk appetite and budgetregulatory compliance requirements

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 11

How often should the Statements of Standards for Attestation Engagements-16 (SSAE16)/International Standard on Assurance Engagements 3402 (ISAE3402) report of your vendors be reviewed?

A. Quarterly

B. Annually

C. Bi-annually

D. Semi-annually

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 12

A system was hardened at the Operating System level and placed into the production environment. Months later an audit was performed and it identified insecure configuration different from the original hardened state.
Which of the following security issues is the MOST likely reason leading to the audit findings?

A. Lack of asset management processes

B. Lack of hardening standards

C. Lack of proper access controls

D. Lack of change management processes

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 13

The primary purpose of a risk register is to:

A. Develop plans for mitigating identified risks

B. Track individual risk assessments

C. Coordinate the timing of scheduled risk assessments

D. Maintain a log of discovered risks

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 14

Access Control lists (ACLs), Firewalls, and Intrusion Prevention Systems are examples of

A. Network based security preventative controls

B. Software segmentation controls

C. Network based security detective controls

D. User segmentation controls

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

EC-COUNCIL EC-Council Certified CISO (CCISO) - 712-50 Exam Practice Test

Contact Us

Useful Links

Latest Updated