A company is preparing a cost-benefit analysis for a new security awareness training program. Which of the following is an example of a tangible benefit that can be quantified?

Reduction in the number of successful phishing attacks

Improved employee security culture

A company is performing a cost-benefit analysis for a new data encryption project. Which of the following is an example of a direct cost?

Loss of productivity during the transition

Increased support calls from users

Opportunity cost of staff training time

Purchase of encryption software licenses

EC-CouncilAssociate C|CISO

Domain 5Objective 5

Return on Investment (ROI) and Cost-Benefit Analysis ACCISO Practice Questions (Page 6)

Part of the Strategic Planning, Finance, Procurement, and Vendor Management domain, which makes up ~23% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 2–3 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

10concepts

Questions 26–30

26application · medium
A company is preparing a cost-benefit analysis for a new security awareness training program. Which of the following is an example of a tangible benefit that can be quantified?
Select an answer first
27foundation · easy
A security project has total benefits of $150,000 and total costs of $100,000. What is the ROI?
Select an answer first
28expert · medium
A security team is evaluating a new threat intelligence platform. The base ROI is calculated at 200%, but the team is uncertain about the accuracy of the threat data and the potential for false positives. They decide to apply a risk adjustment factor of 0.7. What is the risk-adjusted ROI?
Select an answer first
29application · easy
A healthcare organization is considering a new data loss prevention (DLP) system. The initial cost is $150,000, and the expected annual net benefit is $50,000. What is the payback period for this investment?
Select an answer first
30application · medium
A company is performing a cost-benefit analysis for a new data encryption project. Which of the following is an example of a direct cost?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.

Return on Investment (ROI) and Cost-Benefit Analysis ACCISO Practice Questions (Page 6)

Questions 26–30

A company is preparing a cost-benefit analysis for a new security awareness training program. Which of the following is an example of a tangible benefit that can be quantified?

A security project has total benefits of $150,000 and total costs of $100,000. What is the ROI?

A security team is evaluating a new threat intelligence platform. The base ROI is calculated at 200%, but the team is uncertain about the accuracy of the threat data and the potential for false positives. They decide to apply a risk adjustment factor of 0.7. What is the risk-adjusted ROI?

A healthcare organization is considering a new data loss prevention (DLP) system. The initial cost is $150,000, and the expected annual net benefit is $50,000. What is the payback period for this investment?

A company is performing a cost-benefit analysis for a new data encryption project. Which of the following is an example of a direct cost?

Keep studying — Strategic Planning, Finance, Procurement, and Vendor Management