EC-COUNCIL CCISO 712-50 Questions & Answers

• Question 51:

  When reviewing a Solution as a Service (SaaS) provider's security health and posture, which key document should you review?

  A. SaaS provider's website certifications and representations (certs and reps)

  B. SOC-2 Report

  C. Metasploit Audit Report

  D. Statement from SaaS provider attesting their ability to secure your data

  Correct Answer: B

  Reference: https://www.threatstack.com/blog/how-saas-companies-can-build-a-compliance-roadmap

• Question 52:

  As the Risk Manager of an organization, you are task with managing vendor risk assessments. During the assessment, you identified that the vendor is engaged with high profiled clients, and bad publicity can jeopardize your own brand.

  Which is the BEST type of risk that defines this event?

  A. Compliance Risk

  B. Reputation Risk

  C. Operational Risk

  D. Strategic Risk

  Correct Answer: B

• Question 53:

  A cloud computing environment that is bound together by technology that allows data and applications to be shared between public and private clouds is BEST referred to as a?

  A. Public cloud

  B. Private cloud

  C. Community cloud

  D. Hybrid cloud

  Correct Answer: D

  Reference: https://www.datacenters.com/services/cloud-services#:~:text=Hybrid%20clouds%20combine% 20public%20and,flexibility%20and%20more%20deployment%20options

• Question 54:

  An organization recently acquired a Data Loss Prevention (DLP) solution, and two months after the implementation, it was found that sensitive data was posted to numerous Dark Web sites. The DLP application was checked, and there are no apparent malfunctions and no errors.

  What is the MOST likely reason why the sensitive data was posted?

  A. The DLP Solution was not integrated with mobile device anti-malware

  B. Data classification was not properly performed on the assets

  C. The sensitive data was not encrypted while at rest

  D. A risk assessment was not performed after purchasing the DLP solution

  Correct Answer: D

• Question 55:

  The main purpose of the SOC is:

  A. An organization which provides Tier 1 support for technology issues and provides escalation when needed

  B. A distributed organization which provides intelligence to governments and private sectors on cybercriminal activities

  C. The coordination of personnel, processes and technology to identify information security events and provide timely response and remediation

  D. A device which consolidates event logs and provides real-time analysis of security alerts generated by applications and network hardware

  Correct Answer: C

  Reference: https://www.eccouncil.org/what-is-soc/

• Question 56:

  When obtaining new products and services, why is it essential to collaborate with lawyers, IT security professionals, privacy professionals, security engineers, suppliers, and others?

  A. This makes sure the files you exchange aren't unnecessarily flagged by the Data Loss Prevention (DLP) system

  B. Contracting rules typically require you to have conversations with two or more groups

  C. Discussing decisions with a very large group of people always provides a better outcome

  D. It helps to avoid regulatory or internal compliance issues

  Correct Answer: D

  Reference: https://www.eccouncil.org/wp-content/uploads/2016/07/NICE-2.0-and-EC-Council-CertMapping.pdf

• Question 57:

  ABC Limited has recently suffered a security breach with customers' social security number available on the dark web for sale. The CISO, during the time of the incident, has been fired, and you have been hired as the replacement. The analysis of the breach found that the absence of an insider threat program, lack of least privilege policy, and weak access control was to blame. You would like to implement key performance indicators to mitigate the risk.

  Which metric would meet the requirement?

  A. Number of times third parties access critical information systems

  B. Number of systems with known vulnerabilities

  C. Number of users with elevated privileges

  D. Number of websites with weak or misconfigured certificates

  Correct Answer: C

• Question 58:

  When information security falls under the Chief Information Officer (CIO), what is their MOST essential role?

  A. Oversees the organization's day-to-day operations, creating the policies and strategies that govern operations

  B. Enlisting support from key executives the information security program budget and policies

  C. Charged with developing and implementing policies designed to protect employees and customers' data from unauthorized access

  D. Responsible for the success or failure of the IT organization and setting strategic direction

  Correct Answer: D

  Reference: https://www.investopedia.com/terms/c/cio.asp

• Question 59:

  Which regulation or policy governs protection of personally identifiable user data gathered during a cyber investigation?

  A. ITIL

  B. Privacy Act

  C. Sarbanes Oxley

  D. PCI-DSS

  Correct Answer: B

• Question 60:

  Which of the following would negatively impact a log analysis of a multinational organization?

  A. Centralized log management

  B. Encrypted log files in transit

  C. Each node set to local time

  D. Log aggregation agent each node

  Correct Answer: D