Certified CISO Exam Questions PDF download

QUESTION: 56

An organization’s firewall technology needs replaced. A specific technology has been selected that is less costly than others and lacking in some important capabilities. The security officer has voiced concerns about sensitivedata breaches but the decision is made to purchase. What does this selection indicate?

A high threat environment
A low vulnerability environment
A high risk tolerance environment
A low risk tolerance environment

Answer(s): C

Reveal Solution Next Question

QUESTION: 57

Which of the following is MOST important when dealing with an Information Security Steering committee?

Ensure that security policies and procedures have been vetted and approved.
Review all past audit and compliance reports.
Include a mix of members from different departments and staff levels.
Be briefed about new trends and products at each meeting by a vendor.

Answer(s): B

Reveal Solution Next Question

QUESTION: 58

Risk that remains after risk mitigation is known as_____________.

Accepted risk
Residual risk
Non-tolerated risk
Persistent risk

Answer(s): B

Reveal Solution Next Question

QUESTION: 59

An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System.

Which of the following international standards can BEST assist this organization?

Payment Card Industry Data Security Standards (PCI-DSS)
International Organization for Standardizations – 27005 (ISO-27005)
International Organization for Standardizations – 27004 (ISO-27004)
Control Objectives for Information Technology (COBIT)

Answer(s): C

Reveal Solution Next Question

QUESTION: 60

When would it be more desirable to develop a set of decentralized security policies and procedures within an enterprise environment?

When there is a variety of technologies deployed in the infrastructure.
When it results in an overall lower cost of operating the security program.
When there is a need to develop a more unified incident response capability.
When the enterprise is made up of many business units with diverse business activities, risks profiles and regulatory requirements.

Answer(s): D

Reveal Solution Next Question

EC-Council Certified CISO 712-50 Dumps in PDF

Free EC-Council 712-50 Real Questions (page: 12)

QUESTION: 56

QUESTION: 57

QUESTION: 58

QUESTION: 59

QUESTION: 60