EC-Council 712-50 Practice Exams
Last updated on Oct 21,2026- Exam Code: 712-50
- Exam Name: EC-Council Certified CISO (CCISO)
- Certification Provider: EC-Council
- Latest update: Oct 21,2026
Many times a CISO may have to speak to the Board of Directors (BOD) about their cyber security posture.
What would be the BEST choice of security metrics to present to the BOD?
- A . All vulnerabilities found on servers and desktops
- B . Only critical and high vulnerabilities on servers and desktops
- C . Only critical and high vulnerabilities that impact important production servers
- D . All vulnerabilities that impact important production servers
Which of the following provides an audit framework?
- A . Control Objectives for IT (COBIT)
- B . Payment Card Industry-Data Security Standard (PCI-DSS)
- C . International Organization Standard (ISO) 27002
- D . National Institute of Standards and Technology (NIST) SP 800-30
Credit card information, medical data, and government records are all examples of:
- A . Confidential/Protected Information
- B . Bodily Information
- C . Territorial Information
- D . Communications Information
A Security Operations Centre (SOC) manager is informed that a database containing highly sensitive corporate strategy information is under attack. Information has been stolen and the database server was disconnected.
Who must be informed of this incident?
- A . Internal audit
- B . The data owner
- C . All executive staff
- D . Government regulators
Which of the following best describes revenue?
- A . Non-operating financial liabilities minus expenses
- B . The true profit-making potential of an organization
- C . The sum value of all assets and cash flow into the business
- D . The economic benefit derived by operating a business
Which of the following methods are used to define contractual obligations that force a vendor to meet customer expectations?
- A . Terms and Conditions
- B . Service Level Agreements (SLA)
- C . Statement of Work
- D . Key Performance Indicators (KPI)
Which of the following set of processes is considered to be one of the cornerstone cycles of the International Organization for Standardization (ISO) 27001 standard?
- A . Plan-Check-Do-Act
- B . Plan-Do-Check-Act
- C . Plan-Select-Implement-Evaluate
- D . SCORE (Security Consensus Operational Readiness Evaluation)
An organization is required to implement background checks on all employees with access to databases containing credit card information. This is considered a security
- A . Procedural control
- B . Management control
- C . Technical control
- D . Administrative control
A security professional has been promoted to be the CISO of an organization. The first task is to create a security policy for this organization. The CISO creates and publishes the security policy. This policy however, is ignored and not enforced consistently.
Which of the following is the MOST likely reason for the policy shortcomings?
- A . Lack of a formal security awareness program
- B . Lack of a formal security policy governance process
- C . Lack of formal definition of roles and responsibilities
- D . Lack of a formal risk management policy
When analyzing and forecasting a capital expense budget what are not included?
- A . Network connectivity costs
- B . New datacenter to operate from
- C . Upgrade of mainframe
- D . Purchase of new mobile devices to improve operations