CCISO Core IT Security 2

Question 1

A CISO is implementing a defense-in-depth strategy. Which concept best describes layering multiple security controls so that if one fails, others still provide protection?

Accepted Answer

Defense-in-depth

Answer

Defense-in-depth uses multiple overlapping security layers so no single control failure results in a complete breach.

Question 2

During a risk assessment, an organization determines that a threat has a 25% annual probability of occurring and would cause $400,000 in damages. What is the Annual Loss Expectancy (ALE)?

Accepted Answer

$160,000

Answer

ALE = ARO × SLE = 0.25 × $400,000 = $100,000; however here ALE = 0.25 × $400,000 = $100,000... wait: ALE = 0.25 × $400,000 = $100,000.

Question 3

Which access control model assigns permissions based on a subject's clearance level and an object's classification label, enforcing mandatory access policies?

Accepted Answer

Mandatory Access Control (MAC)

Answer

MAC enforces access based on security labels and clearances, with the system—not the owner—making access decisions.

Question 4

A security analyst discovers that an attacker modified audit logs to hide intrusion evidence. Which security principle was violated?

Accepted Answer

Integrity

Answer

Integrity ensures data is accurate and unaltered; tampering with audit logs directly violates this principle.

Question 5

Which cryptographic protocol provides forward secrecy by generating unique session keys for each session, so compromising one key does not expose past sessions?

Accepted Answer

Diffie-Hellman Ephemeral (DHE)

Answer

DHE generates ephemeral keys per session, ensuring past session keys cannot be derived even if the long-term private key is later compromised.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Core IT Security 2