EC-COUNCIL CCISO 712-50 Questions & Answers

• Question 61:

  Which of the following statements below regarding Key Performance indicators (KPIs) are true?

  A. Development of KPI's are most useful when done independently

  B. They are a strictly quantitative measure of success

  C. They should be standard throughout the organization versus domain-specific so they are more easily correlated

  D. They are a strictly qualitative measure of success

  Correct Answer: A

  Reference: https://kpi.org/KPI-Basics/KPI-Development

• Question 62:

  As the Business Continuity Coordinator of a financial services organization, you are responsible for ensuring assets are recovered timely in the event of a disaster. Which is the BEST Disaster Recovery performance indicator to validate that you are prepared for a disaster?

  A. Recovery Point Objective (RPO)

  B. Disaster Recovery Plan

  C. Recovery Time Objective (RTO)

  D. Business Continuity Plan

  Correct Answer: D

• Question 63:

  What are the three hierarchically related aspects of strategic planning and in which order should they be done?

  A. 1) Information technology strategic planning, 2) Enterprise strategic planning, 3) Cybersecurity or information security strategic planning

  B. 1) Cybersecurity or information security strategic planning, 2) Enterprise strategic planning, 3) Information technology strategic planning

  C. 1) Enterprise strategic planning, 2) Information technology strategic planning, 3) Cybersecurity or information security strategic planning

  D. 1) Enterprise strategic planning, 2) Cybersecurity or information security strategic planning, 3) Information technology strategic planning

  Correct Answer: D

• Question 64:

  Which technology can provide a computing environment without requiring a dedicated hardware backend?

  A. Mainframe server

  B. Virtual Desktop

  C. Thin client

  D. Virtual Local Area Network

  Correct Answer: B

• Question 65:

  What process defines the framework of rules and practices by which a board of directors ensure accountability, fairness and transparency in an organization's relationship with its shareholders?

  A. Internal Audit

  B. Corporate governance

  C. Risk Oversight

  D. Key Performance Indicators

  Correct Answer: B

• Question 66:

  A CISO wants to change the defense strategy to ward off attackers. To accomplish this the CISO is looking to a strategy where attackers are lured into a zone of a safe network where attackers can be monitored, controlled, quarantined, or eradicated.

  A. Moderate investment

  B. Passive monitoring

  C. Integrated security controls

  D. Dynamic deception

  Correct Answer: D

• Question 67:

  What is the difference between encryption and tokenization?

  A. Tokenization combined with hashing is always better than encryption

  B. Encryption can be mathematically reversed to provide the original information

  C. The token contains the all original information

  D. Tokenization can be mathematically reversed to provide the original information

  Correct Answer: B

• Question 68:

  Which of the following information would MOST likely be reported at the board-level within an organization?

  A. System scanning trends and results as they pertain to insider and external threat sources

  B. The capabilities of a security program in terms of staffing support

  C. Significant risks and security incidents that have been discovered since the last assembly of the membership

  D. The numbers and types of cyberattacks experienced by the organization since the last assembly of the membership

  Correct Answer: C

• Question 69:

  As the CISO, you have been tasked with the execution of the company's key management program. You MUST ensure the integrity of encryption keys at the point of generation. Which principal of encryption key control will ensure no single individual can constitute or re-constitute a key?

  A. Dual Control

  B. Separation of Duties

  C. Split Knowledge

  D. Least Privilege

  Correct Answer: A

• Question 70:

  What is one key difference between Capital expenditures and Operating expenditures?

  A. Operating expense cannot be written off while Capital expense can

  B. Operating expenses can be depreciated over time and Capital expenses cannot

  C. Capital expenses cannot include salaries and Operating expenses can

  D. Capital expenditures allow for the cost to be depreciated over time and Operating does not

  Correct Answer: C