EC-COUNCIL CCISO 712-50 Questions & Answers

• Question 441:

  The FIRST step in establishing a security governance program is to?

  A. Obtain senior level sponsorship

  B. Conduct a workshop for all end users.

  C. Conduct a risk assessment.

  D. Prepare a security budget.

  Correct Answer: A

• Question 442:

  Who in the organization determines access to information?

  A. Compliance officer

  B. Legal department

  C. Data Owner

  D. Information security officer

  Correct Answer: C

• Question 443:

  When managing an Information Security Program, which of the following is of MOST importance in order to influence the culture of an organization?

  A. Compliance with local privacy regulations

  B. An independent Governance, Risk and Compliance organization

  C. Support Legal and HR teams

  D. Alignment of security goals with business goals

  Correct Answer: D

• Question 444:

  What is the relationship between information protection and regulatory compliance?

  A. That all information in an organization must be protected equally.

  B. The information required to be protected by regulatory mandate does not have to be identified in the organizations data classification policy.

  C. There is no relationship between the two.

  D. That the protection of some information such as National ID information is mandated by regulation and other information such as trade secrets are protected based on business need.

  Correct Answer: D

• Question 445:

  When dealing with Security Incident Response procedures, which of the following steps come FIRST when reacting to an incident?

  A. Eradication

  B. Escalation

  C. Containment

  D. Recovery

  Correct Answer: C

• Question 446:

  Which of the following has the GREATEST impact on the implementation of an information security governance model?

  A. Complexity of organizational structure

  B. Distance between physical locations

  C. Organizational budget

  D. Number of employees

  Correct Answer: A

• Question 447:

  Which of the following is MOST likely to be discretionary?

  A. Policies

  B. Procedures

  C. Guidelines

  D. Standards

  Correct Answer: C

• Question 448:

  The PRIMARY objective of security awareness is to: A. Encourage security-conscious employee behavior

  B. Put employees on notice in case follow-up action for noncompliance is necessary

  C. Ensure that security policies are read

  D. Meet legal and regulatory requirements

  Correct Answer: A

• Question 449:

  Which of the following is of MOST importance when security leaders of an organization are required to align security to influence the culture of an organization?

  A. Understand the business goals of the organization

  B. Poses a strong technical background

  C. Poses a strong auditing background

  D. Understand all regulations affecting the organization

  Correct Answer: A

• Question 450:

  Why is it vitally important that senior management endorse a security policy?

  A. So that employees will follow the policy directives.

  B. So that they can be held legally accountable.

  C. So that external bodies will recognize the organizations commitment to security.

  D. So that they will accept ownership for security within the organization.

  Correct Answer: D