[Q44-Q61] Get New 2024 EC-COUNCIL 712-50 Exam Dumps Bundle On flat Updated Dumps!

QUESTION 44
As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building. Below your office window you notice a door that is normally propped open during the day for groups of people to take breaks outside. Upon looking closer you see there is no badge reader. What should you do?

QUESTION 45
Which of the following represents the HIGHEST negative impact resulting from an ineffective security governance program?

QUESTION 46
The PRIMARY objective for information security program development should be:

QUESTION 47
Which of the following is considered to be an IT governance framework and a supporting
toolset that allows for managers to bridge the gap between control requirements, technical issues, and business risks?

QUESTION 48
As the new CISO at the company you are reviewing the audit reporting process and notice that it includes only detailed technical diagrams. What else should be in the reporting process?

QUESTION 49
The process of creating a system which divides documents based on their security level to manage access to private data is known as ____________________.

QUESTION 50
SCENARIO: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified.
The CISO has implemented remediation activities. Which of the following is the MOST logical next step?

QUESTION 51
Which type of scan is used on the eye to measure the layer of blood vessels?

QUESTION 52
With respect to the audit management process, management response serves what function?

QUESTION 53
In which of the following cases, would an organization be more prone to risk acceptance vs. risk mitigation?

QUESTION 54
You have been hired as the Information System Security Officer (ISSO) for a US federal government agency. Your role is to ensure the security posture of the system is maintained. One of your tasks is to develop and maintain the system security plan (SSP) and supporting documentation.
Which of the following is NOT documented in the SSP?

QUESTION 55
A large number of accounts in a hardened system were suddenly compromised to an external party. Which of the following is the MOST probable threat actor involved in this incident?

QUESTION 56
Payment Card Industry (PCI) compliance requirements are based on what criteria?

QUESTION 57
A cloud computing environment that is bound together by technology that allows data and applications to be shared between public and private clouds is BEST referred to as a?

QUESTION 58
Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.
The CISO has been able to implement a number of technical controls and is able to influence the Information Technology teams but has not been able to influence the rest of the organization.
From an organizational perspective, which of the following is the LIKELY reason for this?

QUESTION 59
Which of the following most commonly falls within the scope of an information security governance steering committee?

QUESTION 60
Which business stakeholder is accountable for the integrity of a new information system?

QUESTION 61
Scenario: You are the newly hired Chief Information Security Officer for a company that has not previously had a senior level security practitioner. The company lacks a defined security policy and framework for their Information Security Program. Your new boss, the Chief Financial Officer, has asked you to draft an outline of a security policy and recommend an industry/sector neutral information security control framework for implementation.
Your Corporate Information Security Policy should include which of the following?