Eccouncil EC-Council CCISO Exam - Topic 5 Question 115 Discussion

Actual exam question for Eccouncil's EC-Council CCISO Exam exam

Question #: 115
Topic #: 5

The process to evaluate the technical and non-technical security controls of an IT system to validate that a given design and implementation meet a specific set of security requirements is called

ASecurity certification

BSecurity system analysis

CSecurity accreditation

DAlignment with business practices and goals.

Show Suggested Answer

Suggested Answer: A

Definition of Security Certification Security certification is the systematic process of evaluating technical and non-technical security controls to ensure that an IT system meets specified security requirements. This process is a key step in validating the security posture of a system before deployment.

Purpose and Scope

Technical Controls: Includes encryption, firewalls, access control mechanisms, etc.

Non-Technical Controls: Policies, procedures, and organizational standards.

Certification ensures that the implementation aligns with security frameworks and regulations.

Comparison of Options

B . Security system analysis: A broader term for examining IT systems, not specifically tied to security requirement validation.

C . Security accreditation: Focuses on management approval, which follows certification.

D . Alignment with business practices and goals: Pertains to strategic alignment, not security validation.

EC-Council Reference

Security certification aligns with phases of system development life cycles (SDLC) and is critical for ensuring compliance and risk management as per EC-Council CISO training.

by Merri at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium EC-Council CCISO Exam Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rolf

4 months ago

D) Alignment with business practices seems off. Not really about security controls.

upvoted 0 times

...

Beckie

4 months ago

I feel like B) Security system analysis could work, but it’s not the best choice.

upvoted 0 times

...

Junita

4 months ago

I lean towards C) Security accreditation. It fits the definition well.

upvoted 0 times

...

Marnie

4 months ago

I think it's A) Security certification. It sounds right.

upvoted 0 times

...

Gail

5 months ago

I always mix up accreditation and certification, but A seems right.

upvoted 0 times

...

Elena

5 months ago

Wait, is this really just about certification? Sounds too simple.

upvoted 0 times

...

Johnathon

5 months ago

Totally agree with A!

upvoted 0 times

...

Sheron

5 months ago

I thought it was C) Security accreditation!

upvoted 0 times

...

Coleen

5 months ago

It's definitely A) Security certification.

upvoted 0 times

...

Arlene

5 months ago

A) Security certification is definitely the way to go. Gotta make sure that system is locked down tight!

upvoted 0 times

...

Raina

6 months ago

Haha, D) Alignment with business practices and goals? That's like saying the answer is "making the CEO happy." Not very technical if you ask me!

upvoted 0 times

...

Shawnda

6 months ago

D) Alignment with business practices and goals? Really? That's not even close to the right answer. What kind of question is this?

upvoted 0 times

...

Melinda

6 months ago

B) Security system analysis sounds like the right approach to me. Gotta analyze that system top to bottom!

upvoted 0 times

...

Chanel

7 months ago

I think C) Security accreditation is the right answer. Isn't that when the system gets the official stamp of approval?

upvoted 0 times

...

Junita

7 months ago

The correct answer is A) Security certification. This is the process of evaluating the security controls of an IT system.

upvoted 0 times

...

Alaine

7 months ago

This sounds familiar! I believe it's A) Security certification, but I might be mixing it up with security assessments from another practice question.

upvoted 0 times

...

Hui

7 months ago

I feel like this question is tricky. I recall something about aligning security with business goals, but I don't think that's the main focus here.

upvoted 0 times

...

Herschel

7 months ago

I remember practicing a question about security accreditation, which I think is related to validating security controls. Could it be C?

upvoted 0 times

...

Patria

8 months ago

I think the answer might be A) Security certification, but I'm not entirely sure if that's the right term for evaluating controls.

upvoted 0 times

...

Eleonore

8 months ago

This looks straightforward. The process of evaluating security controls to validate the design and implementation is security certification, so I'm going with A.

upvoted 0 times

...

Paulina

8 months ago

I'm a bit confused by the wording of this question. I'll need to re-read it a few times to make sure I understand what it's asking. Maybe I can eliminate some of the options first before deciding on the best answer.

upvoted 0 times

...

Helga

8 months ago

Okay, I know this is about validating that security requirements are met. I'm pretty sure the correct answer is C - security accreditation. That's the process of formally approving the system to operate.

upvoted 0 times

...

Tiffiny

8 months ago

Hmm, this seems to be testing my knowledge of security assessment terminology. I'll need to carefully review the definitions of each option to determine the best answer.

upvoted 0 times

...

Claudia

8 months ago

I think this is asking about the process of evaluating security controls, so I'm leaning towards A or C. I'll need to think through the differences between certification and accreditation.

upvoted 0 times

Jesusita

2 months ago

Exactly! Accreditation is the final step after certification.

upvoted 0 times

...

Lauryn

2 months ago

Certification is more about proving security, while accreditation is about approval, right?

upvoted 0 times

...

Tonette

2 months ago

I'm also torn between A and C. What's the main difference?

upvoted 0 times

...