EC-COUNCIL CCISO 712-50 Questions & Answers

• Question 31:

  What organizational structure combines the functional and project structures to create a hybrid of the two?

  A. Traditional

  B. Composite

  C. Project

  D. Matrix

  Correct Answer: D

  Reference: https://www.knowledgehut.com/tutorials/project-management/organization-structures

• Question 32:

  The primary responsibility for assigning entitlements to a network share lies with which role?

  A. CISO

  B. Data owner

  C. Chief Information Officer (CIO)

  D. Security system administrator

  Correct Answer: B

  Reference: https://resources.infosecinstitute.com/certification/data-and-system-ownership/

• Question 33:

  XYZ is a publicly-traded software development company.

  Who is ultimately accountable to the shareholders in the event of a cybersecurity breach?

  A. Chief Financial Officer (CFO)

  B. Chief Software Architect (CIO)

  C. CISO

  D. Chief Executive Officer (CEO)

  Correct Answer: C

  Reference: https://www.eccouncil.org/information-security-management/

• Question 34:

  What is the MOST critical output of the incident response process?

  A. A complete document of all involved team members and the support they provided

  B. Recovery of all data from affected systems

  C. Lessons learned from the incident, so they can be incorporated into the incident response processes

  D. Clearly defined documents detailing standard evidence collection and preservation processes

  Correct Answer: C

  Reference: https://www.eccouncil.org/incident-response-plan-phases/

• Question 35:

  Who is responsible for verifying that audit directives are implemented?

  A. IT Management

  B. Internal Audit

  C. IT Security

  D. BOD Audit Committee

  Correct Answer: B

  Reference: https://www.eccouncil.org/information-security-management/

• Question 36:

  Which of the following strategies provides the BEST response to a ransomware attack?

  A. Real-time off-site replication

  B. Daily incremental backup

  C. Daily full backup

  D. Daily differential backup

  Correct Answer: B

• Question 37:

  When evaluating a Managed Security Services Provider (MSSP), which service(s) is/are most important:

  A. Patch management

  B. Network monitoring

  C. Ability to provide security services tailored to the business' needs

  D. 24/7 tollfree number

  Correct Answer: C

  Reference: https://digitalguardian.com/blog/how-hire-evaluate-managed-security-service-providers-mssps

• Question 38:

  Many successful cyber-attacks currently include:

  A. Phishing Attacks

  B. Misconfigurations

  C. Social engineering

  D. All of these

  Correct Answer: C

  Reference: https://www.eccouncil.org/what-is-social-engineering/

• Question 39:

  Who should be involved in the development of an internal campaign to address email phishing?

  A. Business unit leaders, CIO, CEO

  B. Business Unite Leaders, CISO, CIO and CEO

  C. All employees

  D. CFO, CEO, CIO

  Correct Answer: B

• Question 40:

  Of the following types of SOCs (Security Operations Centers), which one would be MOST likely used if the CISO has decided to outsource the infrastructure and administration of it?

  A. Virtual

  B. Dedicated

  C. Fusion

  D. Command

  Correct Answer: A

  Reference: https://www.techtarget.com/searchsecurity/definition/Security-Operations-Center-SOC