A company is performing a cost-benefit analysis for a new vulnerability management program. Which of the following steps should be performed FIRST?

Identify and categorize all direct and indirect costs

Quantify all intangible benefits in monetary terms

Present the results to stakeholders

Which of the following is classified as an indirect cost of a security program?

Cost of security consulting services

License fees for security software

Employee time spent on security awareness training

Salaries of dedicated security staff

A company is evaluating the total cost of ownership for a new endpoint protection platform. Which of the following costs should be categorized as a direct cost?

Productivity loss during deployment

Increased help desk workload during rollout

Opportunity cost of staff time spent on training

A company is preparing a cost-benefit analysis for a new identity and access management (IAM) system. Which of the following benefits is considered an intangible benefit that is difficult to quantify in monetary terms?

Improved customer trust and brand reputation

Reduced help desk ticket volume

Which of the following best describes the process of cost-benefit analysis?

Identifying risks and assigning likelihood and impact ratings

Calculating the internal rate of return for a project

Listing all costs and benefits, assigning monetary values, and comparing them

Determining the total cost of ownership of a security solution

EC-CouncilAssociate C|CISO

Domain 5Objective 5

Return on Investment (ROI) and Cost-Benefit Analysis ACCISO Practice Questions (Page 7)

Part of the Strategic Planning, Finance, Procurement, and Vendor Management domain, which makes up ~23% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 2–3 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

10concepts

Questions 31–35

31application · medium
A company is performing a cost-benefit analysis for a new vulnerability management program. Which of the following steps should be performed FIRST?
Select an answer first
32foundation · easy
Which of the following is classified as an indirect cost of a security program?
Select an answer first
33application · medium
A company is evaluating the total cost of ownership for a new endpoint protection platform. Which of the following costs should be categorized as a direct cost?
Select an answer first
34application · medium
A company is preparing a cost-benefit analysis for a new identity and access management (IAM) system. Which of the following benefits is considered an intangible benefit that is difficult to quantify in monetary terms?
Select an answer first
35foundation · easy
Which of the following best describes the process of cost-benefit analysis?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.