Free 712-50 Exam Braindumps
EC-Council Certified CISO Questions 96–100 (page: 21)

Updated On: 10-Feb-2026

What two methods are used to assess risk impact?

  1. Quantitative and qualitative
  2. Qualitative and percent of loss realized
  3. Subjective and Objective
  4. Cost and annual rate of expectance

Answer(s): A



An organization information security policy serves to_____________.

  1. define security configurations for systems
  2. establish budgetary input in order to meet compliance requirements
  3. establish acceptable systems and user behavior
  4. define relationships with external law enforcement agencies
  5. None

Answer(s): C



An IT auditor has recently discovered that because of a shortage of skilled operations personnel, the security administrator has agreed to work one late night shift a week as the senior computer operator.

The most appropriate course of action for the IT auditor is to:

  1. Review the system log for each of the late night shifts to determine whether any irregular actions occurred.
  2. Inform senior management of the risk involved.
  3. Develop a computer-assisted audit technique to detect instances of abuses of the arrangement.
  4. Agree to work with the security officer on these shifts as a form of preventative control.

Answer(s): B



The patching and monitoring of systems on a consistent schedule is required by?

  1. Industry best practices
  2. Audit best practices
  3. Risk Management framework
  4. Local privacy laws

Answer(s): C



IT control objectives are useful to IT auditors as they provide the basis for understanding the:

  1. The audit control checklist
  2. Technique for securing information
  3. Desired results or purpose of implementing specific control procedures.
  4. Security policy

Answer(s): C



Viewing page 21 of 93
Viewing questions 101 - 105 out of 637 questions


Post your Comments and Discuss EC-Council 712-50 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!