Which initiative best demonstrates a CISO fostering a security-aware culture?

Conducting regular phishing simulation exercises for all employees

Providing security training only to new hires

Keeping security policies confidential to avoid confusion

Focusing on technical security controls only

After a ransomware incident, a company's CISO leads a post-incident review. The review finds that the incident response team did not have clear authority to make decisions during the crisis, causing delays. What should the CISO do to improve future incident response?

Wait for the next incident to see if the team performs better.

Replace the incident response team leader.

Define a clear incident command structure with pre-authorized decision-makers.

Purchase more advanced incident response software.

Which of the following is a resource management responsibility of the CISO?

Performing background checks on all employees

Hiring and developing security staff with the necessary skills

Assigning daily tasks to individual security analysts

Purchasing all office supplies for the security team

A CISO is leading the enterprise risk management process. The organization has identified a critical vulnerability in a legacy system that is essential for operations. The cost to remediate the vulnerability is high, and the business unit manager wants to accept the risk. What should the CISO do?

Require the business unit manager to remediate the vulnerability immediately, regardless of cost.

Accept the risk and document the decision in the risk register.

Present the risk to the executive leadership with a clear analysis of the potential impact and options, and let them make an informed decision.

Transfer the risk by purchasing cyber insurance.

Which activity is part of the CISO's incident management responsibility?

Communicating with law enforcement during an incident

Writing detection rules for the SIEM

Conducting post-incident reviews to identify lessons learned

EC-CouncilCertified Chief Information Security Officer

Domain 3Objective 1

The Role of the CISO CCISO Practice Questions (Page 4)

Part of the Security Program Management and Operations domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 62 practice questions to prepare you well beyond it. (estimate)

62questions here

13free pages

12concepts

Questions 16–20

16foundation · easy
Which initiative best demonstrates a CISO fostering a security-aware culture?
Select an answer first
17application · medium
After a ransomware incident, a company's CISO leads a post-incident review. The review finds that the incident response team did not have clear authority to make decisions during the crisis, causing delays. What should the CISO do to improve future incident response?
Select an answer first
18foundation · easy
Which of the following is a resource management responsibility of the CISO?
Select an answer first
19application · medium
A CISO is leading the enterprise risk management process. The organization has identified a critical vulnerability in a legacy system that is essential for operations. The cost to remediate the vulnerability is high, and the business unit manager wants to accept the risk. What should the CISO do?
Select an answer first
20foundation · easy
Which activity is part of the CISO's incident management responsibility?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.