712-50 Exam Dumps - EC-Council Certified CISO (CCISO)

Go to page:

<< First
Prev
1
2
3
4
5
6
7
8
9
10
Next
Last >>

Question # 9

A security professional has been promoted to be the CISO of an organization. The first task is to create a security policy for this organization. The CISO creates and publishes the security policy. This policy however, is ignored and not enforced consistently. Which of the following is the MOST likely reason for the policy shortcomings?

Lack of a formal security awareness program

Lack of a formal security policy governance process

Lack of formal definition of roles and responsibilities

Lack of a formal risk management policy

Full Access

Question # 10

Risk appetite directly affects what part of a vulnerability management program?

Staff

Scope

Schedule

Scan tools

Full Access

Question # 11

When deploying an Intrusion Prevention System (IPS) the BEST way to get maximum protection from the system is to deploy it

In promiscuous mode and only detect malicious traffic.

In-line and turn on blocking mode to stop malicious traffic.

In promiscuous mode and block malicious traffic.

In-line and turn on alert mode to stop malicious traffic.

Full Access

Question # 12

Which of the following is a benefit of information security governance?

Questioning the trust in vendor relationships.

Increasing the risk of decisions based on incomplete management information.

Direct involvement of senior management in developing control processes

Reduction of the potential for civil and legal liability

Full Access

Question # 13

According to ISO 27001, of the steps for establishing an Information Security Governance program listed below, which comes first?

Identify threats, risks, impacts and vulnerabilities

Decide how to manage risk

Define the budget of the Information Security Management System

Define Information Security Policy

Full Access

Question # 14

What two methods are used to assess risk impact?

Cost and annual rate of expectance

Subjective and Objective

Qualitative and percent of loss realized

Quantitative and qualitative

Full Access

Question # 15

A global retail organization is looking to implement a consistent Disaster Recovery and Business Continuity Process across all of its business units. Which of the following standards and guidelines can BEST address this organizationâ€™s need?

International Organization for Standardizations â€“ 22301 (ISO-22301)

Information Technology Infrastructure Library (ITIL)

Payment Card Industry Data Security Standards (PCI-DSS)

International Organization for Standardizations â€“ 27005 (ISO-27005)

Full Access

Question # 16

When dealing with a risk management process, asset classification is important because it will impact the overall:

Threat identification

Risk monitoring

Risk treatment

Risk tolerance

Full Access