EC-Council 712-50 Practice Exams
Last updated on Oct 23,2026- Exam Code: 712-50
- Exam Name: EC-Council Certified CISO (CCISO)
- Certification Provider: EC-Council
- Latest update: Oct 23,2026
Which of the following is a term related to risk management that represents the estimated frequency at which a threat is expected to transpire?
- A . Single Loss Expectancy (SLE)
- B . Exposure Factor (EF)
- C . Annualized Rate of Occurrence (ARO)
- D . Temporal Probability (TP)
The process of identifying and classifying assets is typically included in the
- A . Threat analysis process
- B . Asset configuration management process
- C . Business Impact Analysis
- D . Disaster Recovery plan
Which of the following is the MOST logical method of deploying security controls within an organization?
- A . Obtain funding for all desired controls and then create project plans for implementation
- B . Apply the simpler controls as quickly as possible and use a risk-based approach for the more difficult and costly controls
- C . Apply the least costly controls to demonstrate positive program activity
- D . Obtain business unit buy-in through close communication and coordination
An access point (AP) is discovered using Wireless Equivalent Protocol (WEP). The ciphertext sent by the AP is encrypted with the same key and cipher used by its stations.
What authentication method is being used?
- A . Shared key
- B . Asynchronous
- C . Open
- D . None
In defining a strategic security plan for an organization, what should a CISO first analyze?
- A . Reach out to a business similar to yours and ask for their plan
- B . Set goals that are difficult to attain to drive more productivity
- C . Review business acquisitions for the past 3 years
- D . Analyze the broader organizational strategic plan
SCENARIO: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified.
Which of the following is the FIRST action the CISO will perform after receiving the audit report?
- A . Inform peer executives of the audit results
- B . Validate gaps and accept or dispute the audit findings
- C . Create remediation plans to address program gaps
- D . Determine if security policies and procedures are adequate
Which of the following most commonly falls within the scope of an information security governance steering committee?
- A . Approving access to critical financial systems
- B . Developing content for security awareness programs
- C . Interviewing candidates for information security specialist positions
- D . Vetting information security policies
Which of the following most commonly falls within the scope of an information security governance steering committee?
- A . Approving access to critical financial systems
- B . Developing content for security awareness programs
- C . Interviewing candidates for information security specialist positions
- D . Vetting information security policies
A bastion host should be placed:
- A . Inside the DMZ
- B . In-line with the data center firewall
- C . Beyond the outer perimeter firewall
- D . As the gatekeeper to the organization’s honeynet
Which of the following terms is used to describe countermeasures implemented to minimize risks to physical property, information, and computing systems?
- A . Security frameworks
- B . Security policies
- C . Security awareness
- D . Security controls