EC-COUNCIL EC-Council Certified CISO (CCISO) - 712-50 Exam Practice Test

A CISO wants to change the defense strategy to ward off attackers. To accomplish this the CISO is looking to a strategy where attackers are lured into a zone of a safe network where attackers can be monitored, controlled, quarantined, or eradicated.

In MOST organizations which group periodically reviews network intrusion detection system logs for all systems as part of their daily tasks?

The MOST common method to get an unbiased measurement of the effectiveness of an Information Security Management System (ISMS) is to

Which of the following tests is an IS auditor performing when a sample of programs is selected to determine if the source and object versions are the same?

Which of the following functions implements and oversees the use of controls to reduce risk when creating an information security program?

An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System. Which of the following international standards can BEST assist this organization?

Scenario: As you begin to develop the program for your organization, you assess the corporate culture and determine that there is a pervasive opinion that the security program only slows things down and limits the performance of the "real workers." What must you do first in order to shift the prevailing opinion and reshape corporate culture to understand the value of information security to the organization?

Which of the following is the MOST effective method for discovering common technical vulnerabilities within the IT environment?

Risk appetite is typically determined by which of the following organizational functions?

Which of the following is a countermeasure to prevent unauthorized database access from web applications?

A recommended method to document the respective roles of groups and individuals for a given process is to:

What is a critical initial step when creating a Business Continuity Plan (BCP)?

An auditor is reviewing the security classifications for a group of assets and finds that many of the assets are not correctly classified.
What should the auditor's NEXT step be?

Which of the following is critical in creating a security program aligned with an organization's goals?

Your incident handling manager detects a virus attack in the network of your company. You develop a signature based on the characteristics of the detected virus. Which of the following phases in the incident handling process will utilize the signature to resolve this incident?