EC-Council 712-50 Practice Exams
Last updated on Oct 23,2026- Exam Code: 712-50
- Exam Name: EC-Council Certified CISO (CCISO)
- Certification Provider: EC-Council
- Latest update: Oct 23,2026
ABC Limited has recently suffered a security breach with customers’ social security number available on the dark web for sale. The CISO, during the time of the incident, has been fired, and you have been hired as the replacement. The analysis of the breach found that the absence of an insider threat program, lack of least privilege policy, and weak access control was to blame. You would like to implement key performance indicators to mitigate the risk.
Which metric would meet the requirement?
- A . Number of times third parties access critical information systems
- B . Number of systems with known vulnerabilities
- C . Number of users with elevated privileges
- D . Number of websites with weak or misconfigured certificates
Which International Organization for Standardization (ISO) below BEST describes the performance of risk management, and includes a five-stage risk management methodology.
- A . ISO 27001
- B . ISO 27002
- C . ISO 27004
- D . ISO 27005
In terms of supporting a forensic investigation, it is now imperative that managers, first-responders, etc., accomplish the following actions to the computer under investigation:
- A . Secure the area and shut-down the computer until investigators arrive
- B . Secure the area and attempt to maintain power until investigators arrive
- C . Immediately place hard drive and other components in an anti-static bag
- D . Secure the area.
Which of the following represents the best method of ensuring business unit alignment with security program requirements?
- A . Provide clear communication of security requirements throughout the organization
- B . Demonstrate executive support with written mandates for security policy adherence
- C . Create collaborative risk management approaches within the organization
- D . Perform increased audits of security processes and procedures
Which of the following would negatively impact a log analysis of a multinational organization?
- A . Centralized log management
- B . Encrypted log files in transit
- C . Each node set to local time
- D . Log aggregation agent each node
Acceptable levels of information security risk tolerance in an organization should be determined by?
- A . Corporate legal counsel
- B . CISO with reference to the company goals
- C . CEO and board of director
- D . Corporate compliance committee
The process for management approval of the security certification process which states the risks and mitigation of such risks of a given IT system is called
- A . Security certification
- B . Security system analysis
- C . Security accreditation
- D . Alignment with business practices and goals.
The BEST organization to provide a comprehensive, independent and certifiable perspective on established security controls in an environment is
- A . Penetration testers
- B . External Audit
- C . Internal Audit
- D . Forensic experts
Which of the following are not stakeholders of IT security projects?
- A . Board of directors
- B . Third party vendors
- C . CISO
- D . Help Desk
Creating a secondary authentication process for network access would be an example of?
- A . An administrator with too much time on their hands.
- B . Putting undue time commitment on the system administrator.
- C . Supporting the concept of layered security
- D . Network segmentation.