CCISO Core IT Security 4

Question 1

A CISO must develop a Business Continuity Plan (BCP). Which metric defines the maximum acceptable amount of time a system can be offline before causing unacceptable business impact?

Accepted Answer

Recovery Time Objective (RTO)

Answer

RTO specifies the target time within which a system must be restored after a disruption to avoid unacceptable consequences.

Question 2

During a forensic investigation, which principle ensures that evidence is collected and handled in a manner that preserves its admissibility in court?

Accepted Answer

Chain of custody

Answer

Chain of custody documents every person who handled evidence and every action taken, ensuring its integrity and legal admissibility.

Question 3

An organization's security policy requires that employees use multi-factor authentication. An employee uses a password and a hardware token. These represent which two authentication factor types?

Accepted Answer

Something you know and something you have

Answer

A password is 'something you know' and a hardware token is 'something you have,' satisfying two distinct MFA factor categories.

Question 4

A CISO is evaluating cloud security controls. Which framework specifically addresses cloud security best practices and provides a Cloud Controls Matrix (CCM)?

Accepted Answer

Cloud Security Alliance (CSA)

Answer

The CSA publishes the Cloud Controls Matrix, a framework of security controls specifically mapped to cloud service delivery models.

Question 5

Which type of social engineering attack involves sending fraudulent emails to a small, highly targeted group of individuals within a specific organization?

Accepted Answer

Spear phishing

Answer

Spear phishing targets a specific individual or small group with personalized messages, unlike broad phishing campaigns.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Core IT Security 4