712-50問題集、EC-COUNCIL実際の試験問題

質問 1

Which type of physical security control scan a person's external features through a digital video camera before granting access to a restricted area?

A. Iris scan

B. Retinal scan

C. Signature kinetics scan

D. Facial recognition scan

正解: D

質問 2

Your IT auditor is reviewing significant events from the previous year and has identified some procedural oversights. Which of the following would be the MOST concerning?

A. Failure to notify police of an attempted intrusion

B. Lack of periodic examination of access rights

C. Lack of notification to the public of disclosure of confidential information.

D. Lack of reporting of a successful denial of service attack on the network.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 3

What does the acronym RACI stand for?

A. Review, Act, Communicate, and Inform

B. Responsible, Accountable, Consulted, and Informed

C. Responsible, Authorized, Consulted, and Initiated

D. Researched, Advised, Communicated, and Implemented

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 4

When reviewing a Solution as a Service (SaaS) provider's security health and posture, which key document should you review?

A. Metasploit Audit Report

B. SOC-2 Report

C. Statement from SaaS provider attesting their ability to secure your data

D. SaaS provider's website certifications and representations (certs and reps)

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 5

The Information Security Management program MUST protect:

A. critical business processes and /or revenue streams

B. against distributed denial of service attacks

C. intellectual property released into the public domain

D. all organizational assets

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 6

Which of the following statements about Encapsulating Security Payload (ESP) is true?

A. It uses UDP port 22

B. It is an IPSec protocol.

C. It is a text-based communication protocol.

D. It uses TCP port 22 as the default port and operates at the application layer.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 7

Who in the organization determines access to information?

A. Legal department

B. Compliance officer

C. Information security officer

D. Data Owner

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 8

The Health Insurance Portability and Accountability Act (HIPAA) requires an agreement between Cloud Service Providers (CCSP) and the covered entity. Based on HIPAA. which document must be completed between the covered entity and the CCSP?

A. Interconnection Security Agreement (ISA)

B. Memorandum of Understanding (MOU)

C. Service Level Agreement (SLA)

D. Business Associate Agreement (BAA]

正解: D

質問 9

A large number of accounts in a hardened system were suddenly compromised to an external party. Which of the following is the MOST probable threat actor involved in this incident?

A. Advanced Persistent Threat (APT)

B. Poorly configured firewalls

C. Malware

D. An insider

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 10

An organization licenses and uses personal information for business operations, and a server containing that information has been compromised. What kind of law would require notifying the owner or licensee of this incident?

A. Data breach disclosure

B. Special circumstance disclosure

C. Consumer right disclosure

D. Security incident disclosure

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 11

SCENARIO: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified.
The CISO has validated audit findings, determined if compensating controls exist, and started initial remediation planning. Which of the following is the MOST logical next step?

A. Validate the effectiveness of current controls

B. Create detailed remediation funding and staffing plans

C. Review security procedures to determine if they need modified according to findings

D. Report the audit findings and remediation status to business stake holders

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 12

Involvement of senior management is MOST important in the development of:

A. IT security policies.

B. Standards and guidelines.

C. IT security implementation plans.

D. IT security procedures.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 13

Which of the following is an accurate statement regarding capital expenses?

A. Capital expenses can never be replaced by operational expenses

B. They are easily reduced through the elimination of usage, such as reducing power for lighting of work areasduring off-hours

C. Capital expenses are typically long-term investments with value being realized through their use

D. The organization is typically able to regain the initial cost by selling this type of asset

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 14

Information security policies should be reviewed:

A. by stakeholders at least annually

B. by the CISO when new systems are brought online

C. by the Incident Response team after an audit

D. by internal audit semiannually

正解: A

解説: (PassTest メンバーにのみ表示されます)

EC-COUNCIL EC-Council Certified CISO (CCISO) - 712-50 模擬練習