Home / ECCouncil / 712-50

ECCouncil 712-50 Practice Test - Questions Answers, Page 23

Question list

List of questions

Question 221

(0)

A CISO implements smart cards for credential management, and as a result has reduced costs associated with help desk operations supporting password resets. This demonstrates which of the following p

Question 222

(0)

Which of the following is critical in creating a security program aligned with an organization's goals?

Question 223

(0)

A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization. Which of the foll

Question 224

(0)

A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization. Which of the foll

Question 225

(0)

Which of the following represents the BEST method of ensuring security program alignment to business needs?

Question 226

(0)

A newly appointed security officer finds data leakage software licenses that had never been used. The officer decides to implement a project to ensure it gets installed, but the project gets a grea

Question 227

(0)

Which of the following represents the BEST method for obtaining business unit acceptance of security controls within an organization?

Question 228

(0)

An organization has a stated requirement to block certain traffic on networks. The implementation of controls will disrupt a manufacturing process and cause unacceptable delays, resulting in sever r

Question 229

(0)

A CISO has recently joined an organization with a poorly implemented security program. The desire is to base the security program on a risk management approach. Which of the following is a foundatio

Question 230

(0)

Risk appetite is typically determined by which of the following organizational functions?

Question 221

A CISO implements smart cards for credential management, and as a result has reduced costs associated with help desk operations supporting password resets. This demonstrates which of the following principles?

Security alignment to business goals

Regulatory compliance effectiveness

Increased security program presence

Proper organizational policy enforcement

Show Answer Comment (0)

Question 222

Which of the following is critical in creating a security program aligned with an organization's goals?

Ensure security budgets enable technical acquisition and resource allocation based on internal compliance requirements

Develop a culture in which users, managers and IT professionals all make good decisions about information risk

Provide clear communication of security program support requirements and audit schedules

Create security awareness programs that include clear definition of security program goals and charters

Show Answer Comment (0)

Question 223

A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization. Which of the following principles does this best demonstrate?

Alignment with the business

Effective use of existing technologies

Leveraging existing implementations

Proper budget management

Show Answer Comment (0)

Question 224

Alignment with the business

Effective use of existing technologies

Leveraging existing implementations

Proper budget management

Show Answer Comment (0)

Question 225

Which of the following represents the BEST method of ensuring security program alignment to business needs?

Create a comprehensive security awareness program and provide success metrics to business units

Create security consortiums, such as strategic security planning groups, that include business unit participation

Ensure security implementations include business unit testing and functional validation prior to production rollout

Ensure the organization has strong executive-level security representation through clear sponsorship or the creation of a CISO role

Show Answer Comment (0)

Question 226

A newly appointed security officer finds data leakage software licenses that had never been used.

The officer decides to implement a project to ensure it gets installed, but the project gets a great deal of resistance across the organization. Which of the following represents the MOST likely reason for this situation?

The software license expiration is probably out of synchronization with other software licenses

The project was initiated without an effort to get support from impacted business units in the organization

The software is out of date and does not provide for a scalable solution across the enterprise

The security officer should allow time for the organization to get accustomed to her presence before initiating security projects

Show Answer Comment (0)

Question 227

Which of the following represents the BEST method for obtaining business unit acceptance of security controls within an organization?

Allow the business units to decide which controls apply to their systems, such as the encryption of sensitive data

Create separate controls for the business units based on the types of business and functions they perform

Ensure business units are involved in the creation of controls and defining conditions under which they must be applied

Provide the business units with control mandates and schedules of audits for compliance validation

Show Answer Comment (0)

Question 228

An organization has a stated requirement to block certain traffic on networks. The implementation of controls will disrupt a manufacturing process and cause unacceptable delays, resulting in sever revenue disruptions. Which of the following is MOST likely to be responsible for accepting the risk until mitigating controls can be implemented?

The CISO

Audit and Compliance

The CFO

The business owner

Show Answer Comment (0)

Question 229

A CISO has recently joined an organization with a poorly implemented security program. The desire is to base the security program on a risk management approach. Which of the following is a foundational requirement in order to initiate this type of program?

A security organization that is adequately staffed to apply required mitigation strategies and regulatory compliance solutions

A clear set of security policies and procedures that are more concept-based than controls-based

A complete inventory of Information Technology assets including infrastructure, networks, applications and data

A clearly identified executive sponsor who will champion the effort to ensure organizational buy-in

Show Answer Comment (0)