EC-Council 712-50 Practice Exams
Last updated on Oct 22,2026- Exam Code: 712-50
- Exam Name: EC-Council Certified CISO (CCISO)
- Certification Provider: EC-Council
- Latest update: Oct 22,2026
The formal certification and accreditation process has four primary steps, what are they?
- A . Evaluating, describing, testing and authorizing
- B . Evaluating, purchasing, testing, authorizing
- C . Auditing, documenting, verifying, certifying
- D . Discovery, testing, authorizing, certifying
Which of the following are the MOST important factors for proactively determining system vulnerabilities?
- A . Subscribe to vendor mailing list to get notification of system vulnerabilities
- B . Deploy Intrusion Detection System (IDS) and install anti-virus on systems
- C . Configure firewall, perimeter router and Intrusion Prevention System (IPS)
- D . Conduct security testing, vulnerability scanning, and penetration testing
Which of the following conditions would be the MOST probable reason for a security project to be rejected by the executive board of an organization?
- A . The Net Present Value (NPV) of the project is positive
- B . The NPV of the project is negative
- C . The Return on Investment (ROI) is larger than 10 months
- D . The ROI is lower than 10 months
When managing an Information Security Program, which of the following is of MOST importance in order to influence the culture of an organization?
- A . An independent Governance, Risk and Compliance organization
- B . Alignment of security goals with business goals
- C . Compliance with local privacy regulations
- D . Support from Legal and HR teams
An example of professional unethical behavior is:
- A . Gaining access to an affiliated employee’s work email account as part of an officially sanctioned internal investigation
- B . Sharing copyrighted material with other members of a professional organization where all members have legitimate access to the material
- C . Copying documents from an employer’s server which you assert that you have an intellectual property claim to possess, but the company disputes
- D . Storing client lists and other sensitive corporate internal documents on a removable thumb drive
A system is designed to dynamically block offending Internet IP-addresses from requesting services from a secure website. This type of control is considered
- A . Zero-day attack mitigation
- B . Preventive detection control
- C . Corrective security control
- D . Dynamic blocking control
When reviewing a Solution as a Service (SaaS) provider’s security health and posture, which key document should you review?
- A . SaaS provider’s website certifications and representations (certs and reps)
- B . SOC-2 Report
- C . Metasploit Audit Report
- D . Statement from SaaS provider attesting their ability to secure your data
What key technology can mitigate ransomware threats?
- A . Use immutable data storage
- B . Phishing exercises
- C . Application of multiple end point anti-malware solutions
- D . Blocking use of wireless networks
Which of the following organizations is typically in charge of validating the implementation and effectiveness of security controls?
- A . Security Administrators
- B . Internal/External Audit
- C . Risk Management
- D . Security Operations
What are the three hierarchically related aspects of strategic planning and in which order should they be done?
- A . 1) Information technology strategic planning, 2) Enterprise strategic planning, 3) Cybersecurity or information security strategic planning
- B . 1) Cybersecurity or information security strategic planning, 2) Enterprise strategic planning, 3) Information
technology strategic planning - C . 1) Enterprise strategic planning, 2) Information technology strategic planning, 3) Cybersecurity or information security strategic planning
- D . 1) Enterprise strategic planning, 2) Cybersecurity or information security strategic planning, 3) Information technology strategic planning