EC-COUNCIL EC-Council Certified CISO (CCISO) - 712-50 Exam Practice Test

The governing body that defines best practices for the collection of digital evidence is the:

Step-by-step procedures to regain normalcy in the event of a major earthquake is PRIMARILY covered by which of the following plans?

Which of the following refers to the quantity or quality of project deliverables expanding from the original project plan?

The process for management approval of the security certification process which states the risks and mitigation of such risks of a given IT system is called

Scenario: The new CISO was informed of all the Information Security projects that the section has in progress. Two projects are over a year behind schedule and way over budget.
Which of the following will be most helpful for getting an Information Security project that is behind schedule back on schedule?

What is the PRIMARY difference between regulations and standards?

Which publication serves as a resource of enterprise security-based standards and BEST practices?

SCENARIO: Critical servers show signs of erratic behavior within your organization's intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team.
What phase of the response provides measures to reduce the likelihood of an incident from recurring?

When assessing internal control objectives, what are the auditor's PRIMARY concerns?

A new CISO just started with a company and on the CISO's desk is the last complete Information Security Management audit report. The audit report is over two years old. After reading it, what should be the CISO's FIRST priority?

When choosing a risk mitigation method what is the MOST important factor?