EC-Council 712-50 Practice Exams
Last updated on Oct 21,2026- Exam Code: 712-50
- Exam Name: EC-Council Certified CISO (CCISO)
- Certification Provider: EC-Council
- Latest update: Oct 21,2026
The organization does not have the time to remediate the vulnerability; however it is critical to release the application.
Which of the following needs to be further evaluated to help mitigate the risks?
- A . Provide developer security training
- B . Deploy Intrusion Detection Systems
- C . Provide security testing tools
- D . Implement Compensating Controls
When would it be more desirable to develop a set of decentralized security policies and procedures within an enterprise environment?
- A . When there is a need to develop a more unified incident response capability.
- B . When the enterprise is made up of many business units with diverse business activities, risks profiles and regulatory requirements.
- C . When there is a variety of technologies deployed in the infrastructure.
- D . When it results in an overall lower cost of operating the security program.
Which wireless encryption technology makes use of temporal keys?
- A . Wireless Application Protocol (WAP)
- B . Wifi Protected Access version 2 (WPA2)
- C . Wireless Equivalence Protocol (WEP)
- D . Extensible Authentication Protocol (EAP)
A university recently hired a CISO. One of the first tasks is to develop a continuity of operations plan (COOP).
In developing the business impact assessment (BIA), which of the following MOST closely relate to the data backup and restoral?
- A . Recovery Point Objective (RPO)
- B . Mean Time to Delivery (MTD)
- C . Recovery Time Objective (RTO)
- D . Maximum Tolerable Downtime (MTD)
Scenario: Your corporate systems have been under constant probing and attack from foreign IP addresses for more than a week. Your security team and security infrastructure have performed well under the stress. You are confident that your defenses have held up under the test, but rumors are spreading that sensitive customer data has been stolen and is now being sold on the Internet by criminal elements. During your investigation of the rumored compromise you discover that data has been breached and you have discovered the repository of stolen data on a server located in a foreign country. Your team now has full access to the data on the foreign server.
Your defenses did not hold up to the test as originally thought. As you investigate how the data was compromised through log analysis you discover that a hardworking, but misguided business intelligence analyst posted the data to an obfuscated URL on a popular cloud storage service so they could work on it from home during their off-time.
Which technology or solution could you deploy to prevent employees from removing corporate data from your network? Choose the BEST answer.
- A . Security Guards posted outside the Data Center
- B . Data Loss Prevention (DLP)
- C . Rigorous syslog reviews
- D . Intrusion Detection Systems (IDS)
What is the main purpose of the Incident Response Team?
- A . Ensure efficient recovery and reinstate repaired systems
- B . Create effective policies detailing program activities
- C . Communicate details of information security incidents
- D . Provide current employee awareness programs
At what level of governance are individual projects monitored and managed?
- A . Program
- B . Milestone
- C . Enterprise
- D . Portfolio
A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization.
Which of the following principles does this best demonstrate?
- A . Effective use of existing technologies
- B . Create a comprehensive security awareness program and provide success metrics to business units
- C . Proper budget management
- D . Leveraging existing implementations
What is the THIRD state of the Tuckman Stages of Group Development?
- A . Performing
- B . Norming
- C . Storming
- D . Forming
Risk is defined as:
- A . Threat times vulnerability divided by control
- B . Advisory plus capability plus vulnerability
- C . Asset loss times likelihood of event
- D . Quantitative plus qualitative impact