ECCouncil 712-50 - EC-Council Certified CISO Exam
Page: 3 / 122
Total 606 questions
Question #11 (Topic: Single Topic)
The PRIMARY objective of security awareness is to:
A. Encourage security-conscious employee behavior
B. Put employees on notice in case follow-up action for noncompliance is necessary
C. Ensure that security policies are read
D. Meet legal and regulatory requirements
Answer: A
Question #12 (Topic: Single Topic)
Which of the following is MOST likely to be discretionary?
A. Policies
B. Procedures
C. Guidelines
D. Standards
Answer: C
Question #13 (Topic: Single Topic)
Which of the following has the GREATEST impact on the implementation of an information security governance model?
A. Complexity of organizational structure
B. Distance between physical locations
C. Organizational budget
D. Number of employees
Answer: A
Question #14 (Topic: Single Topic)
When dealing with Security Incident Response procedures, which of the following steps come FIRST when reacting to an incident?
A. Eradication
B. Escalation
C. Containment
D. Recovery
Answer: C
Question #15 (Topic: Single Topic)
What is the relationship between information protection and regulatory compliance?
A. That all information in an organization must be protected equally.
B. The information required to be protected by regulatory mandate does not have to be identified in the organizations data classification policy.
C. There is no relationship between the two.
D. That the protection of some information such as National ID information is mandated by regulation and other information such as trade secrets are protected based on business need.
Answer: D
