EC-Council 712-50 Practice Exams
Last updated on Oct 21,2026- Exam Code: 712-50
- Exam Name: EC-Council Certified CISO (CCISO)
- Certification Provider: EC-Council
- Latest update: Oct 21,2026
The PRIMARY objective for information security program development should be:
- A . Reducing the impact of the risk to the business.
- B . Establishing strategic alignment with bunsiness continuity requirements
- C . Establishing incident response programs.
- D . Identifying and implementing the best security solutions.
When you develop your audit remediation plan what is the MOST important criteria?
- A . To remediate half of the findings before the next audit.
- B . To remediate all of the findings before the next audit.
- C . To validate that the cost of the remediation is less than the risk of the finding.
- D . To validate the remediation process with the auditor.
Which of the following statements about Encapsulating Security Payload (ESP) is true?
- A . It is an IPSec protocol.
- B . It is a text-based communication protocol.
- C . It uses TCP port 22 as the default port and operates at the application layer.
- D . It uses UDP port 22
A system was hardened at the Operating System level and placed into the production environment. Months later an audit was performed and it identified insecure configuration different from the original hardened state.
Which of the following security issues is the MOST likely reason leading to the audit findings?
- A . Lack of asset management processes
- B . Lack of change management processes
- C . Lack of hardening standards
- D . Lack of proper access controls
Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates.
When multiple regulations or standards apply to your industry you should set controls to meet the:
- A . Easiest regulation or standard to implement
- B . Stricter regulation or standard
- C . Most complex standard to implement
- D . Recommendations of your Legal Staff
Which of the following represents the BEST method for obtaining business unit acceptance of security controls within an organization?
- A . Allow the business units to decide which controls apply to their systems, such as the encryption of sensitive data
- B . Create separate controls for the business units based on the types of business and functions they perform
- C . Ensure business units are involved in the creation of controls and defining conditions under which they must be applied
- D . Provide the business units with control mandates and schedules of audits for compliance
validation
The process for identifying, collecting, and producing digital information in support of legal proceedings is called
- A . chain of custody.
- B . electronic discovery.
- C . evidence tampering.
- D . electronic review.
Which of the following is considered the MOST effective tool against social engineering?
- A . Anti-phishing tools
- B . Effective Security awareness program
- C . Anti-malware tools
- D . Effective Security Vulnerability Management Program
Which of the following is considered to be an IT governance framework and a supporting toolset that allows for managers to bridge the gap between control requirements, technical issues, and business risks?
- A . Control Objective for Information Technology (COBIT)
- B . Committee of Sponsoring Organizations (COSO)
- C . Payment Card Industry (PCI)
- D . Information Technology Infrastructure Library (ITIL)
Which type of physical security control scan a person’s external features through a digital video camera before granting access to a restricted area?
- A . Iris scan
- B . Retinal scan
- C . Facial recognition scan
- D . Signature kinetics scan