An organization has decided to develop an in-house BCM capability. The organization has determined it is best to follow a BCM standard published by the International Organization for Standardization (ISO).The BEST ISO standard to follow that outlines the complete lifecycle of BCM is?

ISO 22318 Supply Chain Continuity

From the CISO's perspective in looking at financial statements, the statement of retained earnings of an organization:

Represents the percentage of earnings that could in part be used to finance future security controls

Has a direct correlation with the CISO's budget

Represents, in part, the savings generated by the proper acquisition and implementation of security controls

Represents the sum of all capital expenditures

Represents the percentage of earnings that could in part be used to finance future security controls

The Board of Directors of a publicly-traded company is concerned about the security implications of a strategic project that will migrate 50% of the organization's information technology assets to the cloud. They have requested a briefing on the project plan and a progress report of the security stream of the project. As the CISO, you have been tasked with preparing the report for the Chief Executive Officer to present.Using the Earned Value Management (EVM), what does a Cost Variance (CV) of -1,200 mean?

The project budget has reserves

The project cost is in alignment with the budget

What is the primary difference between regulations and standards?

Regulations are made enforceable by the power provided by laws

Standards will include regulations

Standards that aren't followed are punishable by fines

Regulations are made enforceable by the power provided by laws

Regulations must be reviewed and approved by the business

A Security Operations Manager is finding it difficult to maintain adequate staff levels to monitor security operations during off-hours. To reduce the impact of staff shortages and increase coverage during off-hours, the SecOps manager is considering outsourcing off-hour coverage.What Security Operations Center (SOC) model does this BEST describe?

Security Network Operations Center (SNOC)

A CISO must conduct risk assessments using a method where the Chief Financial Officer (CFO) receives impact data in financial terms to use as input to select the proper level of coverage in a new cybersecurity insurance policy.What is the MOST effective method of risk analysis to provide the CFO with the information required?

Conduct a qualitative risk assessment

Conduct a quantitative risk assessment

Conduct a hybrid risk assessment

Conduct a subjective risk assessment

Conduct a qualitative risk assessment

Which of the following BEST mitigates ransomware threats?

Blocking use of wireless networks

Application of multiple endpoint anti-malware solutions

A company wants to fill a Chief Information Security Officer position. Which of the following qualifications and experience would be MOST desirable in a candidate?

Industry certifications, technical knowledge and program management skills

Multiple certifications, strong technical capabilities and lengthy resume

Industry certifications, technical knowledge and program management skills

College degree, audit capabilities and complex project management

Multiple references, strong background check and industry certifications

A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to organizational implementation and management requirements. Which of the following principles does this BEST demonstrate?

Leveraging existing implementations

Effective use of existing technologies

Which of the following is the MOST important to share with an Information Security Steering Committee:

Review audit and compliance reports

Include a mix of members from different departments and staff levels

Review audit and compliance reports

Ensure that security policies and procedures have been vetted and approved

Be briefed about new trends and products at each meeting by a vendor

You have been promoted to the CISO of a retail store. Which of the following compliance standards is the MOST important to the organization?

Payment Card Industry (PCI) Data Security Standard (DSS)

The Federal Risk and Authorization Management Program (FedRAMP)

The alerting, monitoring, and lifecycle management of security-related events are typically managed by the:

Security Threat and vulnerability management process

Governance, risk, and compliance tools

Security Threat and vulnerability management process

What is the purpose of the statement of retained earnings of an organization?

It represents the percentage of earnings that could in part be used to finance future security controls

It represents the sum of all capital expenditures

It represents the percentage of earnings that could in part be used to finance future security controls

It represents the savings generated by the proper acquisition and implementation of security controls

It has a direct correlation with the CISO's budget

Which of the following is considered the MOST effective tool against social engineering?

Effective Security awareness program

Effective Security Vulnerability Management Program

ECCouncil 712-50 Practice Test 12 - Free Online Exam Prep & Questions

What is an approach to estimating the strengths and weaknesses of alternatives used to determine options, which provide the BEST approach to achieving benefits while preserving savings called?

Become a Premium Member for full access

Unlock Premium Member

ECCouncil 712-50 Practice Test 12

Question

ECCouncil 712-50 Practice Tests

Practice Tests