EC-COUNCIL CCISO 712-50 Questions & Answers

• Question 21:

  A Security Operations Manager is finding it difficult to maintain adequate staff levels to monitor security operations during off-hours. To reduce the impact of staff shortages and increase coverage during off-hours, the SecOps manager is considering outsourcing off-hour coverage.

  What Security Operations Center (SOC) model does this BEST describe?

  A. Virtual SOC

  B. In-house SOC

  C. Security Network Operations Center (SNOC)

  D. Hybrid SOC

  Correct Answer: A

  Reference: https://www.techtarget.com/searchsecurity/tip/Benefits-of-virtual-SOCs-Enterprise-run-vs-fullymanaged

• Question 22:

  The Board of Directors of a publicly-traded company is concerned about the security implications of a strategic project that will migrate 50% of the organization's information technology assets to the cloud. They have requested a briefing on the project plan and a progress report of the security stream of the project. As the CISO, you have been tasked with preparing the report for the Chief Executive Officer to present.

  Using the Earned Value Management (EVM), what does a Cost Variance (CV) of -1,200 mean?

  A. The project is over budget

  B. The project budget has reserves

  C. The project cost is in alignment with the budget

  D. The project is under budget

  Correct Answer: A

  Reference: https://www.pmi.org/learning/library/earned-value-management-systems-analysis8026#:~:text=The%20cost%20variance%20is%20defined,the%20project%20is%20on%20budget

• Question 23:

  Optical biometric recognition such as retina scanning provides access to facilities through reading the unique characteristics of a person's eye.

  However, authorization failures can occur with individuals who have?

  A. Glaucoma or cataracts

  B. Two different colored eyes (heterochromia iridium)

  C. Contact lens

  D. Malaria

  Correct Answer: A

• Question 24:

  What is defined as the process of envisioning a desired future and translating this vision into broadly defined goals or objectives and a sequence of steps to achieve them?

  A. Business Planning

  B. Tactical Planning

  C. Successor Planning

  D. Strategic Planning

  Correct Answer: D

  Reference: https://www.utmb.edu/osbp/institutional-strategic-planning-integration/strategic-planningprocess#:~:text=Strategic%20Planning%20is%20a%20systematic,of%20steps%20to%20achieve% 20them

• Question 25:

  A bastion host should be placed: A. Inside the DMZ

  B. In-line with the data center firewall

  C. Beyond the outer perimeter firewall

  D. As the gatekeeper to the organization's honeynet

  Correct Answer: C

  Reference: https://www.skillset.com/questions/a-bastion-host-is-which-of-the-following

• Question 26:

  A Security Operations (SecOps) Manager is considering implementing threat hunting to be able to make better decisions on protecting information and assets.

  What is the MAIN goal of threat hunting to the SecOps Manager?

  A. Improve discovery of valid detected events

  B. Enhance tuning of automated tools to detect and prevent attacks

  C. Replace existing threat detection strategies

  D. Validate patterns of behavior related to an attack

  Correct Answer: A

  Reference: https://www.techtarget.com/searchsecurity/feature/7-SecOps-roles-and-responsibilities-for-themodern-enterprise

• Question 27:

  Which of the following are the triple constraints of project management?

  A. Time, quality, and scope

  B. Cost, quality, and time

  C. Scope, time, and cost

  D. Quality, scope, and cost

  Correct Answer: C

  Reference: https://www.teamgantt.com/blog/triple-constraint-project-management#:~:text=Each%20side% 20or%20point%20of,scope%2C%20time%2C%20and%20cost

• Question 28:

  What does RACI stand for?

  A. Reasonable, Actionable, Controlled, and Implemented

  B. Responsible, Actors, Consult, and Instigate

  C. Responsible, Accountable, Consulted, and Informed

  D. Review, Act, Communicate, and Inform

  Correct Answer: C

  Reference: https://www.google.com/search?q=What+does+RACI+stand+forandoq=What+does+RACI+stand +forandaqs=edge..69i57.220j0j4andsourceid=chromeandie=UTF-8

• Question 29:

  What key technology can mitigate ransomware threats?

  A. Use immutable data storage

  B. Phishing exercises

  C. Application of multiple end point anti-malware solutions

  D. Blocking use of wireless networks

  Correct Answer: A

  Reference: https://cloud.google.com/blog/products/identity-security/5-pillars-of-protection-to-preventransomware-attacks

• Question 30:

  When selecting a security solution with recurring maintenance costs after the first year, the CISO should:

  A. Defer selection until the market improves and cash flow is positive

  B. Implement the solution and ask for the increased operating cost budget when it is time

  C. Communicate future operating costs to the CIO/CFO and seek commitment from them to ensure the new solution's continued use

  D. Cut other essential programs to ensure the new solution's continued use

  Correct Answer: C

  Reference: https://books.google.com/books?id=kiE_EAAAQBAJandpg=PT59andlpg=PT59anddq=Communicate +future+operating+costs+to+the+CIO/CFO+and+seek+commitment+from+them+to+ensure+the+new +solution%E2%80%99s +continued+useandsource=blandots=3MNR-uuPjRandsig=ACfU3U1ibTQwVjKcrliRd3DljpgY5Xlxwandhl=enandsa=Xandved=2ahUKEwiTjoDpuLv0AhU_SvEDHUvgCY4Q6AF6BAhAEAM#v=onepageand q=Communicate%20future%20operating%20costs% 20to%20the%20CIO%2FCFO%20and%20seek% 20commitment%20from%20them%20to%20ensure%20the%20new%20solution%E2%80%99s% 20continued%20useandf=false