Question 111 · 188 in bank
You have a system with 2 identified risks. You determine the probability of one risk occurring is higher than the
Show answer
Answer: A
EC-Council Certified Chief Information Security Officer (CCISO)188 questions across 19 pages are complete and free, with no account or card.
188 questions in this bank
Free access · progress saved on this device
You have a system with 2 identified risks. You determine the probability of one risk occurring is higher than the
Answer: A
Which of the following is an accurate statement regarding capital expenses?
Answer: C
Explanation: Capital expenses (CAPEX) are funds used by an organization to acquire, upgrade, and maintain physical assets such as property, buildings, technology, or equipment. These expenses are typically long-term investments that provide value over time through their use in operations.
Source: Adapted from community discussion — johndoe69
A newly-hired CISO needs to understand the organization's financial management standards for business units and operations. Which of the following would be the best source of this information?
Answer: B
"CISOs rarely have a background in accounting, but most organizations have a CFO or other financial leader who can provide insight into organizational financial management standards" Page 568 CCISO MANUAL
Source: Adapted from community discussion — LARdT
A large number of accounts in a hardened system were suddenly compromised to an external party. Which of the following is the MOST probable threat actor involved in this incident?
Answer: D
Which of the following defines the boundaries and scope of a risk assessment?
Answer: C
The risk assessment charter is a document that defines the boundaries and scope of a risk assessment. It outlines the objectives, scope, methodology, roles, and responsibilities related to the risk assessment process. It provides a clear framework for conducting the assessment and helps ensure that all relevant aspects are considered within the defined boundaries.
Source: Adapted from community discussion — skaf
Simon had all his systems administrators implement hardware and software firewalls to ensure network security. They implemented IDS/IPS systems throughout the network to check for and stop any unauthorized traffic that may attempt to enter. Although Simon and his administrators believed they were secure, a hacker group was able to get into the network and modify files hosted on the company's website. After searching through the firewall and server logs, no one could find how the attackers were able to get in. He decides that the entire network needs to be monitored for critical and essential file changes. This monitoring tool alerts administrators when a critical file is altered. What tool could Simon and his administrators implement to accomplish this?
Answer: D
The answer is D: " Trip Wire" . It is a tool that keeps hashes of all the ciritical files and periodically compares the hashes in order to detect critical file changes. Snort is an an open source IDS/IPS and in the question it is said that they had implemented IDS/ips system.. So it should not be snort.
Source: Adapted from community discussion — e_karma
At what level of governance are individual projects monitored and managed?
Answer: A
A. Answer A Please review : https://www.prince2.com/uk/blog/projects-programmes-and-portfolios-whats-the-difference Individual projects are typically monitored and managed at the program level. A program consists of multiple related projects that are managed and coordinated together to achieve broader organizational objectives. The program level ensures that the projects are aligned and are contributing to the overall goals effectively Portfolio: Refers to the collection of programs and projects aligned with strategic objectives, but it focuses on overall prioritization and resource allocation, not on managing individual projects directly
Source: Adapted from community discussion — Valen2259
What are the three stages of an identity and access management system?
Answer: B
The correct answer is B. Provision, Administration, Enforcement. Explanation: An identity and access management (IAM) system is designed to manage and control user access to resources within an organization's IT environment. It typically consists of three stages: Provision , Administration and Enforcement
Source: Adapted from community discussion — arifbhatkar
Which of the following best describes an access control process that confirms the identity of the entity seeking access to a logical or physical area?
Answer: C
The answer is "C" . Authentication is the process of confirming a claimed Identity . Authorization is the process of granting access according to the identity.
Source: Adapted from community discussion — e_karma
Michael starts a new job and discovers that he has unnecessary access to a variety of systems. Which of the following best describes the problem he has encountered?
Answer: B
B. Answer B. B. Excessive privileges. Michael has encountered a situation where he has been granted more access than necessary to perform his new job. Plainly the sysdadmin has copied the wrong template/hes in the wrong OU and has excessive privileges. Privilege creep (note the word creep) refers to the gradual accumulation of access rights over time, usually as an employee's role changes. its close though Michael has encountered excessive privileges right away, not over time.
Source: Adapted from community discussion — Valen2259
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
712-50 practice, question 111. 188 questions available.
Version 1.0.0. How we source questions