Question 1

Which wireless encryption technology makes use of temporal keys?

Accepted Answer

B

Explanation:  Temporal Keys in WPA2: WPA2 uses the Temporal Key Integrity Protocol (TKIP) or Advanced Encryption Standard (AES) to dynamically generate unique keys for each session. Temporal keys enhance security by preventing key reuse.  Key Features of WPA2: Strong encryption and authentication mechanisms. Improved resilience against attacks compared to WEP.  Why Not Other Options: A . WAP: Refers to Wireless Application Protocol, unrelated to encryption. C . WEP: Uses static keys, not temporal keys. D. EAP: An authentication framework, not a wireless encryption protocol.  EC-Council CISO Alignment: WPA2’s use of temporal keys demonstrates its suitability for secure wireless communication, as emphasized in encryption best practices.

Question 2

What is defined as the friction or opposition resulting from actual or perceived differences or incompatibilities?

Accepted Answer

A

Explanation: :

Question 3

Smith, the project manager for a larger multi-location firm, is leading a software project team that
has 18
members, 5 of which are assigned to testing. Due to recent recommendations by an organizational
quality audit
team, the project manager is convinced to add a quality professional to lead to test team at
additional cost to
the project.
The project manager is aware of the importance of communication for the success of the project and
takes the
step of introducing additional communication channels, making it more complex, in order to assure
quality
levels of the project. What will be the first project management document that Smith should change
in order to
accommodate additional communication channels?

Accepted Answer

C

Explanation: Adding communication channels and changing project elements require updating the change control document, which tracks project changes and ensures proper review and approval. Change Control Process: Ensures project changes are documented, analyzed, and approved. Prevents scope creep and miscommunication. Other Options: WBS Document: Outlines tasks but does not manage changes. Scope Statement: Defines project objectives but does not track updates. Risk Management Plan: Assesses risks, unrelated to communication changes. EC-Council CISO Reference: Project Management Best Practices: Stresses maintaining an updated change control document for project success. Risk Mitigation in Projects: Links change control to effective risk and scope management.

Question 4

Access Control lists (ACLs), Firewalls, and Intrusion Prevention Systems are examples of

Accepted Answer

A

Explanation:  Definition and Role Network-based security preventative controls are measures designed to prevent unauthorized access, attacks, or breaches. Examples include: Access Control Lists (ACLs): Define rules for network traffic. Firewalls: Block unauthorized traffic based on predefined rules. Intrusion Prevention Systems (IPS): Actively block identified threats.  Comparison of Options B . Software segmentation controls: Related to application security, not network-level security. C . Network-based security detective controls: These include tools like IDS, which detect but do not prevent attacks. D . User segmentation controls: Focus on user-based access restrictions, not network controls.  EC-Council Reference Highlighted in network security strategies as critical tools for perimeter defense and attack prevention.

Question 5

What are the primary reasons for the development of a business case for a security project?

Accepted Answer

C

Explanation:  Purpose of a Business Case A business case for a security project is developed to: Communicate risks to stakeholders. Provide a justification for resource allocation and investment. Forecast budgetary and resource requirements.  Comparison of Options A . Estimate risk and negate liability: Business cases estimate risk but do not primarily negate liability. B . Understand attack vectors and sources: While important, this is not the primary focus of a business case. D . Forecast usage and cost per software licensing: This may be part of a business case but is not its primary purpose.  EC-Council Reference Emphasized in EC-Council frameworks, a business case is essential for aligning security projects with organizational priorities and securing executive buy-in.

Question 6

As the CISO you need to write the IT security strategic plan. Which of the following is the MOST important to review before you start writing the plan?

Accepted Answer

B

Explanation:  Alignment with Business Objectives An IT security strategic plan must align with the company’s overall business goals to ensure that security supports and enhances organizational objectives.  Why Review the Business Plan First Provides a clear understanding of organizational priorities, risks, and strategic directions. Helps identify critical assets and processes that require security investment.  Comparison of Options A . The existing IT environment: Important but secondary to aligning with business goals. C . The present IT budget: Helps in resource allocation but doesn’t guide strategic alignment. D . Other corporate technology trends: Relevant but less critical than the business plan.  EC-Council Reference Strategic alignment is a core principle in EC-Council CISO guidance, ensuring security efforts support business resilience and growth.

Question 7

Who is responsible for securing networks during a security incident?

Accepted Answer

D

Explanation:  Role of the Incident Response Team (IRT): The IRT is tasked with managing and mitigating security incidents, including securing networks and restoring operations. Their responsibilities include identifying affected systems, containing breaches, and ensuring secure environments during and after incidents.  Collaboration: While other roles like the CISO provide oversight, the IRT performs hands-on incident management tasks.  Supporting Reference: EC-Council CCISO materials designate the IRT as the primary operational unit during incident response activities.

Question 8

What is the FIRST step in developing the vulnerability management program?

Accepted Answer

D

Explanation: The first step in developing a vulnerability management program is to define a policy, as it establishes the foundation for consistent and effective management of vulnerabilities. Define Policy: A policy outlines the organization's approach to identifying, evaluating, and addressing vulnerabilities. It includes scope, objectives, roles, and responsibilities. Baseline the Environment: After defining the policy, the current IT environment is assessed to identify existing vulnerabilities and benchmark security posture. Maintain and Monitor: Regular updates and monitoring are implemented to ensure the program remains effective over time. Organizational Vulnerability Awareness: Awareness activities follow the policy definition to align teams with organizational goals for vulnerability management. Implementation Order: Without a clear policy, efforts to baseline or maintain the environment may lack focus and consistency. EC-Council CISO Reference: Vulnerability Management Framework: Highlights the importance of establishing policies before operationalizing vulnerability scanning and remediation. Policy-Driven Security: EC-Council emphasizes the role of policies in aligning vulnerability management efforts with organizational goals and compliance requirements.

Question 9

Creating a secondary authentication process for network access would be an example of?

Accepted Answer

B

Explanation:  Layered Security Approach: Secondary authentication adds another layer of security, contributing to the Defense in Depth strategy. Enumerating costs ensures the layered approach is cost-effective and aligns with organizational budgets.  Why This is Correct: Secondary authentication strengthens access controls, a critical aspect of Defense in Depth.  Why Other Options Are Incorrect: A . Nonlinearities in metrics: Irrelevant to authentication processes. C . System hardening: Focuses on system configurations, not authentication. D . Anti-virus for mobile devices: Unrelated to authentication processes.  Reference: EC-Council highlights Defense in Depth strategies as essential for layered protection mechanisms like secondary authentication.

Question 10

Providing oversight of a comprehensive information security program for the entire organization is the primary responsibility of which group under the InfoSec governance framework?

Accepted Answer

A

Explanation:  Primary Responsibility of Senior Executives: Under the InfoSec governance framework, senior executives are tasked with providing oversight of the organization's comprehensive information security program. They ensure alignment with business goals and risk management strategies.  Role in Governance: Senior executives set the tone at the top, allocate resources, and oversee the implementation of security policies and frameworks.  Supporting Reference: CCISO materials identify senior executives as key stakeholders in InfoSec governance, responsible for strategic oversight.

Question 11

The process for management approval of the security certification process which states the risks and mitigation of such risks of a given IT system is called

Accepted Answer

C

Explanation:  Definition of Security Accreditation Security accreditation is the formal approval by management of the security certification process. It documents the identified risks, their mitigations, and establishes the acceptability of residual risks for an IT system.  Steps in the Process Review findings from the security certification process. Assess residual risks and proposed mitigations. Obtain formal approval from authorized personnel.  Comparison of Options A . Security certification: Precedes accreditation and focuses on technical validation. B . Security system analysis: Broad assessment, not specific to the certification-accreditation lifecycle. D . Alignment with business practices and goals: Pertains to overall strategic alignment, not risk acceptance.  EC-Council Reference This process ensures management involvement and accountability, which aligns with CISO responsibilities under risk management frameworks taught by EC-Council.

Question 12

The patching and monitoring of systems on a consistent schedule is required by?

Accepted Answer

B

Explanation:  Patching and Monitoring as Best Practices: Regular patching and system monitoring are considered best practices to ensure vulnerabilities are addressed promptly and systems remain secure.  Why This is Correct: Industry best practices emphasize consistency in patching and monitoring as foundational to maintaining a secure environment.  Why Other Options Are Incorrect: A . Local privacy laws: May require security but do not typically mandate patching schedules. C . Risk management frameworks: Focus on broader strategies, not specific operational practices. D . Audit best practices: Ensure compliance but don’t define operational schedules.  Reference: EC-Council aligns with industry best practices for patch management and system monitoring to maintain organizational security posture.

Question 13

When analyzing and forecasting a capital expense budget what are not included?

Accepted Answer

A

Explanation: When analyzing and forecasting a capital expense (CapEx) budget, network connectivity costs are not included as they are typically considered operating expenses (OpEx). Definition of CapEx: CapEx includes expenses for acquiring, upgrading, or building long-term assets like a new data center or equipment that will provide future benefits. Examples of CapEx: New datacenter: Classified as CapEx because it involves a significant upfront investment in long-term infrastructure. Mainframe upgrades: Involves significant costs for equipment upgrades, which are capitalized. New mobile devices: Asset purchase contributing to operational improvement, making it CapEx. Network Connectivity Costs: These are recurring expenses tied to maintaining internet and network services, categorized under OpEx. EC-Council CISO Reference: Financial Management in Security: Distinguishes between CapEx for infrastructure investment and OpEx for operational continuity.

Question 14

Physical security measures typically include which of the following components?

Accepted Answer

A

Explanation:  Physical security measures typically include: Physical: Locks, barriers, and surveillance systems. Technical: Access control systems and alarm systems. Operational: Security policies, procedures, and personnel training.  Why Other Options Are Incorrect: B . Technical, Strong Password, Operational: Passwords are part of logical security, not physical security. C . Operational, Biometric, Physical: Biometrics is part of technical security measures, not operational. D . Strong Password, Biometric, Common Access Card: Passwords are not physical security measures.  EC-Council CISO Reference: The curriculum outlines the layered approach to security, with physical, technical, and operational components as critical for comprehensive protection.

Question 15

What is the primary reason for performing vendor management?

Accepted Answer

D

Explanation: The primary purpose of vendor management is to define and maintain a partnership for long-term success by ensuring vendors align with the organization’s goals and security requirements. Definition of Vendor Management: Involves selecting, managing, and monitoring vendors to ensure they meet contractual and performance standards. Key Objectives: Establish strong, collaborative relationships that benefit both parties. Ensure vendor compliance with security policies and standards. Why Other Options Are Less Relevant: Risk Coverage: A component but not the primary purpose. Vendor Selection Process: Initial step, not the ultimate goal. Documentation: Necessary but secondary to fostering long-term partnerships. EC-Council CISO Reference: Vendor Management Framework: Highlights building sustainable partnerships as a core goal. Third-Party Risk Management: Aligning vendors with organizational security and business strategies.

Free EC-COUNCIL 712-50 Actual Exam Questions