712-50試験無料問題集（462題）「EC-COUNCIL EC-Council Certified CISO (CCISO) 認定」

出題：1

The primary purpose of a risk register is to:

A. Maintain a log of discovered risks

B. Track individual risk assessments

C. Develop plans for mitigating identified risks

D. Coordinate the timing of scheduled risk assessments

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

A security professional has been promoted to be the CISO of an organization. The first task is to create a security policy for this organization. The CISO creates and publishes the security policy. This policy however, is ignored and not enforced consistently. Which of the following is the MOST likely reason for the policy shortcomings?

A. Lack of a formal security policy governance process

B. Lack of a formal risk management policy

C. Lack of formal definition of roles and responsibilities

D. Lack of a formal security awareness program

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

The effectiveness of social engineering penetration testing using phishing can be used as a Key Performance Indicator (KPI) for the effectiveness of an organization's

A. Risk Management Program.

B. Identity and Access Management Program.

C. Anti-Spam controls.

D. Security Awareness Program.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

The process to evaluate the technical and non-technical security controls of an IT system to validate that a given design and implementation meet a specific set of security requirements is called

A. Security accreditation

B. Security certification

C. Alignment with business practices and goals.

D. Security system analysis

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates.
What is one proven method to account for common elements found within separate regulations and/or standards?

A. Develop a crosswalk

B. Design your program to meet the strictest government standards

C. Hire a GRC expert

D. Use the Find function of your word processor

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which of the following methodologies references the recommended industry standard that Information security project managers should follow?

A. Project Management System Methodology

B. The Security Project And Management Methodology

C. The Security Systems Development Life Cycle

D. Project Management Body of Knowledge

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

As the CISO, you have been tasked with the execution of the company's key management program. You MUST ensure the integrity of encryption keys at the point of generation. Which principal of encryption key control will ensure no single individual can constitute or re-constitute a key?

A. Dual Control

B. Least Privilege

C. Separation of Duties

D. Split Knowledge

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

An international organization is planning a project to implement encryption technologies to protect company confidential information. This organization has data centers on three continents. Which of the following would be considered a MAJOR constraint for the project?

A. Local customer privacy laws

B. Encryption import/export regulations

C. Compliance to local hiring laws

D. Time zone differences

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Which regulation or policy governs protection of personally identifiable user data gathered during a cyber investigation?

A. Privacy Act

B. Sarbanes Oxley

C. PCI-DSS

D. ITIL

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

SCENARIO: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified.
The CISO has implemented remediation activities. Which of the following is the MOST logical next step?

A. Review security procedures to determine if they need modified according to findings

B. Report the audit findings and remediation status to business stake holders

C. Validate security program resource requirements

D. Validate the effectiveness of applied controls

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

Step-by-step procedures to regain normalcy in the event of a major earthquake is PRIMARILY covered by which of the following plans?

A. Damage control plan

B. Disaster recovery plan

C. Incident response plan

D. Business Continuity plan

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：12

To have accurate and effective information security policies how often should the CISO review the organization policies?

A. Every 6 months

B. Quarterly

C. Before an audit

D. At least once a year

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：13

Smith, the project manager for a larger multi-location firm, is leading a software project team that has 18 members, 5 of which are assigned to testing. Due to recent recommendations by an organizational quality audit team, the project manager is convinced to add a quality professional to lead to test team at additional cost to the project.
The project manager is aware of the importance of communication for the success of the project and takes the step of introducing additional communication channels, making it more complex, in order to assure quality levels of the project. What will be the first project management document that Smith should change in order to accommodate additional communication channels?

A. Scope statement

B. Risk management plan

C. Change control document

D. WBS document

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：14

Which of the following is the BEST indicator of a successful project?

A. it meets most of the specifications as outlined in the approved project definition

B. the deliverables are accepted by the key stakeholders

C. it comes in at or below the expenditures planned for in the baseline budget

D. it is completed on time or early as compared to the baseline project plan

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

712-50試験無料問題集「EC-COUNCIL EC-Council Certified CISO (CCISO) 認定」