Guaranteed Success in CCISO 712-50 Exam Dumps [Q100-Q116]

QUESTION 100
Which of the following represents the BEST method of ensuring security program alignment to business needs?

QUESTION 101
Which wireless encryption technology makes use of temporal keys?

QUESTION 102
Scenario: As you begin to develop the program for your organization, you assess the corporate culture and determine that there is a pervasive opinion that the security program only slows things down and limits the performance of the “real workers.” Which group of people should be consulted when developing your security program?

QUESTION 103
As a CISO you need to understand the steps that are used to perform an attack against a network. Put each step into the correct order.
1. Covering tracks
2. Scanning and enumeration
3. Maintaining Access
4. Reconnaissance
5. Gaining Access

QUESTION 104
Which of the following backup sites takes the longest recovery time?

QUESTION 105
Access Control lists (ACLs), Firewalls, and Intrusion Prevention Systems are examples of________________.

QUESTION 106
An access point (AP) is discovered using Wireless Equivalent Protocol (WEP). The ciphertext sent by the AP is encrypted with the same key and cipher used by its stations. What authentication method is being used?

QUESTION 107
Scenario: Your corporate systems have been under constant probing and attack from foreign IP addresses for more than a week. Your security team and security infrastructure have performed well under the stress. You are confident that your defenses have held up under the test, but rumors are spreading that sensitive customer data has been stolen and is now being sold on the Internet by criminal elements.
During your investigation of the rumored compromise, you discover that data has been breached and that the repository of stolen data is on a server located in a foreign country. Your team now has full access to the data on the foreign server.
What action should you take FIRST?

QUESTION 108
The patching and monitoring of systems on a consistent schedule is required by?

QUESTION 109
Your penetration testing team installs an in-line hardware key logger onto one of your
network machines. Which of the following is of major concern to the security organization?

QUESTION 110
In which of the following cases, would an organization be more prone to risk acceptance vs. risk mitigation?

QUESTION 111
Who is responsible for verifying that audit directives are implemented?

QUESTION 112
An access point (AP) is discovered using Wireless Equivalent Protocol (WEP). The cipher text sent by the AP is encrypted with the same key and cipher used by its stations.
What authentication method is being used?

QUESTION 113
Within an organization’s vulnerability management program, who has the responsibility to implement remediation actions?

QUESTION 114
What is the BEST reason for having a formal request for proposal process?

QUESTION 115
As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building. Below your office window you notice a door that is normally propped open during the day for groups of people to take breaks outside. Upon looking closer you see there is no badge reader. What should you do?

QUESTION 116
As a CISO you need to understand the steps that are used to perform an attack against a network.
Put each step into the correct order.
1.Covering tracks
2.Scanning and enumeration
3.Maintaining Access
4.Reconnaissance
5.Gaining Access