EC-Council 712-50 Practice Exams
Last updated on Oct 23,2026- Exam Code: 712-50
- Exam Name: EC-Council Certified CISO (CCISO)
- Certification Provider: EC-Council
- Latest update: Oct 23,2026
The process of creating a system which divides documents based on their security level to manage access to private data is known as
- A . security coding
- B . data security system
- C . data classification
- D . privacy protection
What is a key policy that should be part of the information security plan?
- A . Account management policy
- B . Training policy
- C . Acceptable Use policy
- D . Remote Access policy
Which of the following best describes a portfolio?
- A . The portfolio is used to manage and track individual projects
- B . The portfolio is used to manage incidents and events
- C . A portfolio typically consists of several programs
- D . A portfolio delivers one specific service or program to the business
The process to evaluate the technical and non-technical security controls of an IT system to validate that a given design and implementation meet a specific set of security requirements is called
- A . Security certification
- B . Security system analysis
- C . Security accreditation
- D . Alignment with business practices and goals.
Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.
This global retail company is expected to accept credit card payments.
Which of the following is of MOST concern when defining a security program for this organization?
- A . International encryption restrictions
- B . Compliance to Payment Card Industry (PCI) data security standards
- C . Compliance with local government privacy laws
- D . Adherence to local data breach notification laws
The main purpose of the SOC is:
- A . An organization which provides Tier 1 support for technology issues and provides escalation when needed
- B . A distributed organization which provides intelligence to governments and private sectors on cyber-criminal activities
- C . The coordination of personnel, processes and technology to identify information security events and provide timely response and remediation
- D . A device which consolidates event logs and provides real-time analysis of security alerts generated by applications and network hardware
The patching and monitoring of systems on a consistent schedule is required by?
- A . Local privacy laws
- B . Industry best practices
- C . Risk Management frameworks
- D . Audit best practices
Which of the following represents the BEST reason for an organization to use the Control Objectives for Information and Related Technology (COBIT) as an Information Technology (IT) framework?
- A . It allows executives to more effectively monitor IT implementation costs
- B . Implementation of it eases an organization’s auditing and compliance burden
- C . Information Security (IS) procedures often require augmentation with other standards
- D . It provides for a consistent and repeatable staffing model for technology organizations
A CISO sees abnormally high volumes of exceptions to security requirements and constant pressure from business units to change security processes.
Which of the following represents the MOST LIKELY cause of this situation?
- A . Poor audit support for the security program
- B . A lack of executive presence within the security program
- C . Poor alignment of the security program to business needs
- D . This is normal since business units typically resist security requirements
The ability to hold intruders accountable in a court of law is important.
Which of the following activities are needed to ensure the highest possibility for successful prosecution?
- A . Well established and defined digital forensics process
- B . Establishing Enterprise-owned Botnets for preemptive attacks
- C . Be able to retaliate under the framework of Active Defense
- D . Collaboration with law enforcement