EC-Council CCISO (712-50) Certification Sample Questions
The purpose of this Sample Question Set is to provide you with information about the EC-Council Chief Information Security Officer exam. These sample questions will make you very familiar with both the type and the difficulty level of the questions on the 712-50 certification test. To get familiar with real exam environment, we suggest you try our Sample EC-Council CCISO Certification Practice Exam. This sample practice exam gives you the feeling of reality and is a clue to the questions asked in the actual EC-Council Certified Chief Information Security Officer (CCISO) certification exam.
These sample questions are simple and basic questions that represent likeness to the real EC-Council 712-50 exam questions. To assess your readiness and performance with real time scenario based questions, we suggest you prepare with our Premium EC-Council CCISO Certification Practice Exam. When you solve real time scenario based questions practically, you come across many difficulties that give you an opportunity to improve.
EC-Council 712-50 Sample Questions:
01. An internal audit finds that employees who have changed roles several times still hold access from every previous position, although each original request was properly approved by supervisors and data owners.
Which control BEST addresses the root cause?
a) Stricter approval of new access requests, with a second approver required for sensitive systems
b) Quarterly review of administrator activity logs by the security operations team
c) Multi-factor authentication for every application that holds sensitive data
d) Periodic access recertification by data owners, removing access users no longer need
02. A retailer's business impact analysis sets a recovery time objective of 48 hours for its internal reporting systems, which are not customer-facing. The CFO asks the CISO to recommend the recovery-site option that meets this objective at the lowest reasonable cost.
Which recommendation is BEST?
a) Hot site
b) Warm site
c) Reciprocal agreement with another company
d) Cold site
03. A CISO is launching a data loss prevention program. The CFO controls the program's funding and has asked for monthly detail because the rollout will change how finance staff share files. The facilities manager is barely affected and has little say over the program.
Which engagement strategy is MOST appropriate for the CFO?
a) Manage closely: involve the CFO in key decisions and engage regularly
b) Keep informed: send regular updates without involving the CFO in decisions
c) Monitor: check in periodically with minimal communication effort
d) Keep satisfied: provide enough information to avoid concern, without active involvement
04. For several years the security budget has been set by adding a percentage to the previous year’s figures. A new CFO now requires every security cost, including long-standing tool subscriptions and services, to be justified from zero at each budget cycle.
Which budgeting approach is the CFO requiring?
a) Incremental budgeting
b) Activity-based budgeting
c) Zero-based budgeting
d) Top-down budgeting
05. A treasury manager approves high-value payment instructions electronically. The bank requires that it can verify each approval came from that manager, was not altered, and cannot later be denied by the manager.
How must the digital signature on each approval be created and verified?
a) Created with the manager’s public key and verified with the manager’s own private key
b) Created with the manager’s private key and verified with the manager’s public key
c) Created with the bank’s public key and verified with the bank’s private key
d) Created and verified with a symmetric key shared by the manager and the bank
06. A CISO is sponsoring two initiatives. One replaces the data center's physical access control system to a fixed, fully specified design. The other builds a cloud security monitoring capability whose requirements will change as the organization's cloud adoption evolves over the coming year.
Which delivery approach is BEST for each initiative?
a) Plan-driven delivery for the access control replacement and iterative delivery for the cloud monitoring capability
b) Iterative delivery for the access control replacement and plan-driven delivery for the cloud monitoring capability
c) Plan-driven delivery for both, so that each has a fixed scope baseline to control changes against
d) Iterative delivery for both, so that each can release working increments early
07. The CISO is working with the BCP coordinator on a business impact analysis. For each critical business process, they must determine the total outage the process owner is willing to accept, taking all impact considerations into account.
Which term BEST represents this value?
a) Recovery point objective (RPO)
b) Recovery time objective (RTO)
c) Business impact analysis (BIA)
d) Maximum tolerable downtime (MTD)
08. After a market survey, the CISO’s team has defined the business problem and the evaluation criteria for a managed detection and response service. It wants vendors to propose how they would deliver the service, with pricing, so that the proposals can be scored against the criteria.
Which solicitation document should the team issue?
a) Request for information (RFI)
b) Request for quotation (RFQ)
c) Request for proposal (RFP)
d) Statement of work (SOW)
09. A consultant is hired to perform physical penetration testing at a large financial company. On the first day of the assessment, the consultant arrives at the company’s building dressed as an electrician, waits in the lobby for an employee to pass through the main access gate, and then follows the employee through it into the restricted area.
Which type of attack did the consultant perform?
a) Shoulder surfing
b) Tailgating
c) Badge cloning
d) Mantrap
10. Which of the following is an accurate description of a balance sheet?
a) The details of expenses and revenue over a period of time
b) The percentage of earnings retained by the organization for reinvestment in the business
c) A summarized statement of assets, liabilities and equity at a specific point in time
d) A review of regulations and requirements impacting the business from a financial perspective
Answers:
|
Question: 01 Answer: d |
Question: 02 Answer: b |
Question: 03 Answer: a |
Question: 04 Answer: c |
Question: 05 Answer: b |
|
Question: 06 Answer: a |
Question: 07 Answer: d |
Question: 08 Answer: c |
Question: 09 Answer: b |
Question: 10 Answer: c |
Note: For any error in EC-Council Certified Chief Information Security Officer (CCISO) (712-50) certification exam sample questions, please update us by writing an email on feedback@edusum.com.
