712-50 sample questions

Question 1

As the CISO of a multinational financial institution, you are presenting the annual information security strategy to the Board of Directors. The Board Chair questions why the proposed budget for 'Risk Management' has increased by 40% despite no significant security incidents occurring in the previous fiscal year. Which response best demonstrates alignment between security governance and business objectives?

Accepted Answer

Present a metric-based analysis showing how the increased investment reduces residual risk to within the Board's defined risk appetite, facilitating the company's planned expansion into emerging markets.

Answer

Explain that the threat landscape is evolving rapidly and the increase is necessary to purchase advanced AI-driven threat detection tools to stay ahead of adversaries.

Answer

Highlight that competitors in the financial sector are spending an average of 15% more on security this year and the organization risks falling behind industry benchmarks.

Answer

Detail the specific regulatory fines associated with GDPR and CCPA non-compliance to instill a sense of urgency regarding the potential financial impact of a breach.

Question 2

A global healthcare provider is acquiring a smaller regional hospital network. During the due diligence phase, you identify that the target company uses a legacy EMR system that cannot be patched against several critical vulnerabilities. The business strategy relies on integrating this network within 90 days. What is the most appropriate governance approach to handle this risk?

Accepted Answer

Implement strict network segmentation and virtual patching around the legacy system as a compensating control, and formally document the residual risk for executive sign-off.

Answer

Recommend halting the acquisition immediately until the target company upgrades their EMR system to a supported version.

Answer

Accept the risk temporarily to allow the acquisition to proceed, with a plan to upgrade the system in the next fiscal year.

Answer

Migrate the target company's data immediately to the acquirer's EMR system before connecting their network to the main infrastructure.

Question 3

You are establishing a new Enterprise Risk Management (ERM) framework. You need to define the process for risk treatment decisions. Review the diagram below representing the decision logic. Which logic flow correctly represents the standard risk treatment methodology based on ISO 31000 principles?

```mermaid
flowchart TD
Start[Risk Identified] --> Assess{Risk > Appetite?}
Assess -->|No| A[Monitor]
Assess -->|Yes| Cost{Cost of Control < Impact?}
Cost -->|Yes| B[Treat/Mitigate]
Cost -->|No| Crit{Is Risk Critical?}
Crit -->|Yes| C[Transfer/Avoid]
Crit -->|No| D[Accept]
```

Accepted Answer

The logic is correct as shown.

Answer

The logic is incorrect; if Cost of Control > Impact, the risk should always be Accepted regardless of criticality.

Answer

The logic is incorrect; Risk Transfer should occur before assessing Cost of Control.

Answer

The logic is incorrect; Risks below the Risk Appetite should still be Mitigated if the cost is low.

Question 4

Which of the following documents is the PRIMARY source for an external auditor to determine if an organization's security controls are operating effectively over a period of time?

Accepted Answer

Population of evidence samples (logs, tickets, change records) covering the audit period

Answer

Point-in-time vulnerability assessment report

Answer

Information Security Policy signed by the CEO

Answer

Network topology diagrams and data flow charts

Question 5

A CISO is designing a Key Performance Indicator (KPI) dashboard for the executive team. The goal is to measure the efficiency of the Incident Response (IR) team. Which TWO metrics would provide the most meaningful insight into operational efficiency? (Select TWO)

Accepted Answer

Mean Time to Detect (MTTD)

Accepted Answer

Mean Time to Remediate (MTTR)

Answer

Total number of attacks blocked by the firewall

Answer

Number of security awareness training modules completed

Question 6

Case Study:

Scenario:
A retail organization is migrating its e-commerce platform to a public cloud provider. The CISO is concerned about the 'Shared Responsibility Model'. The development team wants to use a Function-as-a-Service (FaaS) / Serverless architecture to reduce operational overhead. They plan to process credit card transactions directly within these functions.

Constraint:
The organization must remain PCI DSS compliant. The cloud provider is PCI DSS certified.

Question:
In this Serverless architecture, which security control remains the SOLE responsibility of the customer (the retail organization)?

Accepted Answer

Application logic security and proper configuration of IAM roles assigned to the functions

Answer

Physical security of the data centers hosting the serverless functions

Answer

Patching the underlying operating system of the serverless runtime environment

Answer

Network intrusion detection at the hypervisor level

Question 7

True or False: In a robust Third-Party Risk Management (TPRM) program, obtaining a vendor's SOC 2 Type II report eliminates the need for the organization to define its own security requirements in the Master Services Agreement (MSA).

Accepted Answer

False

Answer

True

Question 8

An organization is calculating the Return on Security Investment (ROSI) for a new Data Loss Prevention (DLP) solution.

Given:
- Annual Loss Expectancy (ALE) without DLP: $1,000,000
- Estimated mitigation percentage: 80%
- Annual cost of DLP solution: $150,000

What is the ROSI percentage?

Accepted Answer

433%

Answer

533%

Answer

85%

Answer

150%

Question 9

You are reviewing the Identity and Access Management (IAM) architecture for a hybrid environment. The organization wants to implement Single Sign-On (SSO) across on-premise Active Directory and multiple cloud SaaS applications. Which protocol is the industry standard for exchanging authentication and authorization data between an Identity Provider (IdP) and a Service Provider (SP) in this context?

Accepted Answer

SAML (Security Assertion Markup Language)

Answer

LDAP (Lightweight Directory Access Protocol)

Answer

RADIUS (Remote Authentication Dial-In User Service)

Answer

Kerberos

Question 10

The internal audit team has issued a finding regarding 'Excessive Administrative Privileges' on the corporate network. The IT Director argues that the administrators need these rights to perform their daily tasks efficiently. What is the CISO's best course of action to resolve this conflict while improving security?

Accepted Answer

Implement a Privileged Access Management (PAM) solution with Just-In-Time (JIT) elevation and session recording.

Answer

Support the IT Director and mark the finding as 'Accepted Risk' due to operational necessity.

Answer

Remove all administrative rights immediately and require a written ticket for every administrative action.

Answer

Create a separate 'Admin' VLAN that is not monitored by the audit team.

Top vendors

Top exams

Free 712-50 sample questions

Which of the following documents is the PRIMARY source for an external auditor to determine if an organization's security controls are operating effectively over a period of time?

A CISO is designing a Key Performance Indicator (KPI) dashboard for the executive team. The goal is to measure the efficiency of the Incident Response (IR) team. Which TWO metrics would provide the most meaningful insight into operational efficiency? (Select TWO)

True or False: In a robust Third-Party Risk Management (TPRM) program, obtaining a vendor's SOC 2 Type II report eliminates the need for the organization to define its own security requirements in the Master Services Agreement (MSA).

An organization is calculating the Return on Security Investment (ROSI) for a new Data Loss Prevention (DLP) solution. Given: - Annual Loss Expectancy (ALE) without DLP: $1,000,000 - Estimated mitigation percentage: 80% - Annual cost of DLP solution: $150,000 What is the ROSI percentage?

10 more free samples are waiting