최신 712-50 무료덤프 - EC-COUNCIL EC-Council Certified CISO (CCISO)
A large number of accounts in a hardened system were suddenly compromised to an external party. Which of the following is the MOST probable threat actor involved in this incident?
정답: B
Which of the following information would MOST likely be reported at the board-level within an organization?
정답: B
Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.
The organization has already been subject to a significant amount of credit card fraud. Which of the following is the MOST likely reason for this fraud?
The organization has already been subject to a significant amount of credit card fraud. Which of the following is the MOST likely reason for this fraud?
정답: C
설명: (DumpTOP 회원만 볼 수 있음)
The process for management approval of the security certification process which states the risks and mitigation of such risks of a given IT system is called
정답: C
In MOST organizations which group periodically reviews network intrusion detection system logs for all systems as part of their daily tasks?
정답: A
A system was hardened at the Operating System level and placed into the production environment. Months later an audit was performed and it identified insecure configuration different from the original hardened state. Which of the following security issues is the MOST likely reason leading to the audit findings?
정답: B
Which of the following is a MAJOR consideration when an organization retains sensitive customer data and uses this data to better target the organization's products and services?
정답: B
The alerting, monitoring, and lifecycle management of security-related events are typically managed by the:
정답: A
Scenario: As you begin to develop the program for your organization, you assess the corporate culture and determine that there is a pervasive opinion that the security program only slows things down and limits the performance of the "real workers." What must you do first in order to shift the prevailing opinion and reshape corporate culture to understand the value of information security to the organization?
정답: A
The success of the Chief Information Security Officer is MOST dependent upon:
정답: D
Which of the following is MOST important when dealing with an Information Security Steering committee:
정답: C
Which of the following is MOST likely to be discretionary?
정답: C
Which of the following set of processes is considered to be one of the cornerstone cycles of the International Organization for Standardization (ISO) 27001 standard?
정답: D
An application vulnerability assessment has identified a security flaw in an application. This is a flaw that was previously identified and remediated on a prior release of the application. Which of the following is MOST likely the reason for this recurring issue?
정답: C
Which of the following is the PRIMARY purpose of International Organization for Standardization (ISO) 27001?
정답: A
Which of the following best describes an access control process that confirms the identity of the entity seeking access to a logical or physical area?
정답: D
Creating a secondary authentication process for network access would be an example of?
정답: C
As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building. Below your office window you notice a door that is normally propped open during the day for groups of people to take breaks outside. Upon looking closer you see there is no badge reader. What should you do?
정답: D
Scenario: You are the CISO and are required to brief the C-level executive team on your information security audit for the year. During your review of the audit findings you discover that many of the controls that were put in place the previous year to correct some of the findings are not performing as needed. You have thirty days until the briefing.
To formulate a remediation plan for the non-performing controls what other document do you need to review before adjusting the controls?
To formulate a remediation plan for the non-performing controls what other document do you need to review before adjusting the controls?
정답: A
설명: (DumpTOP 회원만 볼 수 있음)
Who is responsible for securing networks during a security incident?
정답: D