Question 1

- (Exam Topic 6)
What is the primary difference between regulations and standards?

Accepted Answer

Correct answer: C

Question 2

- (Exam Topic 6)
Devising controls for information security is a balance between?

Accepted Answer

Reference: https://www.cybok.org/media/downloads/cybok_version_1.0.pdf

Question 3

- (Exam Topic 6)
The primary responsibility for assigning entitlements to a network share lies with which role?

Accepted Answer

Reference: https://resources.infosecinstitute.com/certification/data-and-system-ownership/

Question 4

- (Exam Topic 6)
A Security Operations Manager is finding it difficult to maintain adequate staff levels to monitor security operations during off-hours. To reduce the impact of staff
shortages and increase coverage during off-hours, the SecOps manager is considering outsourcing off-hour coverage.
What Security Operations Center (SOC) model does this BEST describe?

Accepted Answer

Reference:
https://www.techtarget.com/searchsecurity/tip/Benefits-of-virtual-SOCs-Enterprise-run-vs-fully-managed

Question 5

- (Exam Topic 6)
From the CISO’s perspective in looking at financial statements, the statement of retained earnings of an organization:

Accepted Answer

Reference: https://www.investopedia.com/terms/s/statement-of-retained-earnings.asp

Question 6

- (Exam Topic 6)
When obtaining new products and services, why is it essential to collaborate with lawyers, IT security professionals, privacy professionals, security engineers,
suppliers, and others?

From SurePassExam
https://www.surepassexam.com/712-50-exam-dumps.html (449 New Questions)

Accepted Answer

Reference:
https://www.eccouncil.org/wp-content/uploads/2016/07/NICE-2.0-and-EC-Council-Cert-Mapping.pdf

Question 7

- (Exam Topic 6)
A key cybersecurity feature of a Personal Identification Verification (PIV) Card is:

Accepted Answer

Reference: https://www.securew2.com/blog/piv-personal-identity-verification

Question 8

- (Exam Topic 6)
What organizational structure combines the functional and project structures to create a hybrid of the two?

Accepted Answer

Reference: https://www.knowledgehut.com/tutorials/project-management/organization-structures

Question 9

- (Exam Topic 6)
The Board of Directors of a publicly-traded company is concerned about the security implications of a strategic project that will migrate 50% of the organization’s
information technology assets to the cloud. They have requested a briefing on the project plan and a progress report of the security stream of the project. As the
CISO, you have been tasked with preparing the report for the Chief Executive Officer to present.
Using the Earned Value Management (EVM), what does a Cost Variance (CV) of -1,200 mean?

Accepted Answer

Reference:
https://www.pmi.org/learning/library/earned-value-management-systems-analysis-8026#:~:text=The%20cost%2

Question 10

- (Exam Topic 6)
What does RACI stand for?

Accepted Answer

Reference: https://www.google.com/search?q=What+does+RACI+stand+for&oq=What+does+RACI+stand+for&aqs=edge