EC-CouncilCertified Chief Information Security Officer
Domain 5Objective 6
Vendor Management and Procurement Processes CCISO Practice Questions (Page 7)
Part of the Strategic Planning, Finance, Procurement, and Vendor Management domain, which makes up ~21% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~13–21 in this domain), expect 2–4 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)
54questions here
11free pages
8concepts
Questions 31–35
- 31
A government agency is selecting a vendor for a new identity management system. The agency requires that the vendor be able to integrate with existing legacy systems and that the vendor's financial health be stable. The agency also wants to ensure that the vendor's security practices align with federal standards. Which vendor-selection criterion should be weighted most heavily?
Select an answer first - 32
A telecommunications company is issuing an RFP for a new billing system. The CISO wants to ensure that the RFP includes clear evaluation criteria. Which element is most important to include in the RFP?
Select an answer first - 33
During vendor contract negotiation, which clause is most directly intended to protect the organization from financial loss if the vendor fails to deliver agreed-upon services?
Select an answer first - 34
Which metric is most appropriate for monitoring a vendor's performance against an agreed service level for system availability?
Select an answer first - 35
Which type of vendor risk is most directly associated with the possibility that a vendor's financial difficulties could disrupt the organization's supply of critical services?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.