712-50 Exam Dumps - EC-Council Certified CISO (CCISO)

Go to page:

<< First
Prev
1
2
3
4
5
6
7
8
9
10
Next
Last >>

Question # 33

As the CISO for your company you are accountable for the protection of information resources commensurate with:

Customer demand

Cost and time to replace

Insurability tables

Risk of exposure

Full Access

Question # 34

What oversight should the information security team have in the change management process for application security?

Information security should be informed of changes to applications only

Development team should tell the information security team about any application security flaws

Information security should be aware of any significant application security changes and work with developer to test for vulnerabilities before changes are deployed in production

Information security should be aware of all application changes and work with developers before changes are deployed in production

Full Access

Question # 35

Which of the following functions evaluates risk present in IT initiatives and/or systems when implementing an information security program?

Risk Management

Risk Assessment

System Testing

Vulnerability Assessment

Full Access

Question # 36

Which of the following functions implements and oversees the use of controls to reduce risk when creating an information security program?

Risk Assessment

Incident Response

Risk Management

Network Security administration

Full Access

Question # 37

Which of the following information may be found in table top exercises for incident response?

Security budget augmentation

Process improvements

Real-time to remediate

Security control selection

Full Access

Question # 38

Which of the following methods are used to define contractual obligations that force a vendor to meet customer expectations?

Terms and Conditions

Service Level Agreements (SLA)

Statement of Work

Key Performance Indicators (KPI)

Full Access

Question # 39

A CISO implements smart cards for credential management, and as a result has reduced costs associated with help desk operations supporting password resets. This demonstrates which of the following principles?

Security alignment to business goals

Regulatory compliance effectiveness

Increased security program presence

Proper organizational policy enforcement

Full Access

Question # 40

When selecting a security solution with reoccurring maintenance costs after the first year, the CISO should: (choose the BEST answer)

The CISO should cut other essential programs to ensure the new solutionâ€™s continued use

Communicate future operating costs to the CIO/CFO and seek commitment from them to ensure the new solutionâ€™s continued use

Defer selection until the market improves and cash flow is positive

Implement the solution and ask for the increased operating cost budget when it is time

Full Access