712-50 Exam Dumps - EC-Council Certified CISO (CCISO)

Go to page:

<< First
Prev
4
5
6
7
8
9
10
11
12
13
Next
Last >>

Question # 65

Which of the following tests is an IS auditor performing when a sample of programs is selected to determine if the source and object versions are the same?

A substantive test of program library controls

A compliance test of program library controls

A compliance test of the program compiler controls

A substantive test of the program compiler controls

Full Access

Question # 66

Which of the following organizations is typically in charge of validating the implementation and effectiveness of security controls?

Security Administrators

Internal/External Audit

Risk Management

Security Operations

Full Access

Question # 67

When a critical vulnerability has been discovered on production systems and needs to be fixed immediately, what is the BEST approach for a CISO to mitigate the vulnerability under tight budget constraints?

Transfer financial resources from other critical programs

Take the system off line until the budget is available

Deploy countermeasures and compensating controls until the budget is available

Schedule an emergency meeting and request the funding to fix the issue

Full Access

Question # 68

Which of the following is the MOST important goal of risk management?

Identifying the risk

Finding economic balance between the impact of the risk and the cost of the control

Identifying the victim of any potential exploits.

Assessing the impact of potential threats

Full Access

Question # 69

Many times a CISO may have to speak to the Board of Directors (BOD) about their cyber security posture. What would be the BEST choice of security metrics to present to the BOD?

All vulnerabilities found on servers and desktops

Only critical and high vulnerabilities on servers and desktops

Only critical and high vulnerabilities that impact important production servers

All vulnerabilities that impact important production servers

Full Access

Question # 70

A new CISO just started with a company and on the CISO's desk is the last complete Information Security Management audit report. The audit report is over two years old. After reading it, what should be the CISO's FIRST priority?

Have internal audit conduct another audit to see what has changed.

Contract with an external audit company to conduct an unbiased audit

Review the recommendations and follow up to see if audit implemented the changes

Meet with audit team to determine a timeline for corrections

Full Access

Question # 71

The regular review of a firewall ruleset is considered a

Procedural control

Organization control

Technical control

Management control

Full Access