EC-Council 712-50 Practice Exams
Last updated on Oct 23,2026- Exam Code: 712-50
- Exam Name: EC-Council Certified CISO (CCISO)
- Certification Provider: EC-Council
- Latest update: Oct 23,2026
As the CISO, you have been tasked with the execution of the company’s key management program. You MUST ensure the integrity of encryption keys at the point of generation.
Which principal of encryption key control will ensure no single individual can constitute or re-constitute a key?
- A . Dual Control
- B . Separation of Duties
- C . Split Knowledge
- D . Least Privilege
Risk appetite directly affects what part of a vulnerability management program?
- A . Staff
- B . Scope
- C . Schedule
- D . Scan tools
SCENARIO: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified.
The CISO has validated audit findings, determined if compensating controls exist, and started initial remediation planning.
Which of the following is the MOST logical next step?
- A . Validate the effectiveness of current controls
- B . Create detailed remediation funding and staffing plans
- C . Report the audit findings and remediation status to business stake holders
- D . Review security procedures to determine if they need modified according to findings
When managing the security architecture for your company you must consider:
- A . Security and IT Staff size
- B . Company Values
- C . Budget
- D . All of the above
An organization has a number of Local Area Networks (LANs) linked to form a single Wide Area Network (WAN).
Which of the following would BEST ensure network continuity?
- A . Third-party emergency repair contract
- B . Pre-built servers and routers
- C . Permanent alternative routing
- D . Full off-site backup of every server
The purpose of NIST SP 800-53 as part of the NIST System Certification and Accreditation Project is to establish a set of standardized, minimum security controls for IT systems addressing low, moderate, and high levels of concern for
- A . Confidentiality, Integrity and Availability
- B . Assurance, Compliance and Availability
- C . International Compliance
- D . Integrity and Availability
What are the common data hiding techniques used by criminals?
- A . Unallocated space and masking
- B . Website defacement and log manipulation
- C . Disabled Logging and admin elevation
- D . Encryption, Steganography, and Changing Metadata/Timestamps
Step-by-step procedures to regain normalcy in the event of a major earthquake is PRIMARILY covered by which of the following plans?
- A . Incident response plan
- B . Business Continuity plan
- C . Disaster recovery plan
- D . Damage control plan
Which of the following is true regarding expenditures?
- A . Capital expenditures are never taxable
- B . Operating expenditures are for acquiring assets, capital expenditures are for support costs of that asset
- C . Capital expenditures are used to define depreciation tables of intangible assets
- D . Capital expenditures are for acquiring assets, whereas operating expenditures are for support
costs of that asset
Information security policies should be reviewed:
- A . by stakeholders at least annually
- B . by the CISO when new systems are brought online
- C . by the Incident Response team after an audit
- D . by internal audit semiannually