Discuss EC-Council 712-50 Exam Topic 5 Question 32

Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals

the increasing need to address security consistently at the enterprise level. This new CISO, while confident with

skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.

From an Information Security Leadership perspective, which of the following is a MAJOR concern about the

CISO's approach to security?

ACompliance centric agenda

BIT security centric agenda

CLack of risk management process

DLack of sponsorship from executive management

Suggested Answer: B

Get Premium 712-50 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Mabelle 12 months ago

Not sure if it's just the lack of support; could be deeper issues.

Torie 12 months ago

Totally agree, the IT security centric agenda is crucial.

Truman 12 months ago

Surprised to see a CISO struggling with risk management!

Beatriz 1 year ago

I think it's more about the compliance centric agenda.

Bok 1 year ago

Definitely a lack of sponsorship from executive management.

Bette 1 year ago

I wonder if the IT security centric agenda is actually the problem. It seems like focusing too much on that could lead to overlooking broader organizational needs.

Kasandra 1 year ago

I practiced a question similar to this, and I think a lack of risk management process is crucial. Without it, the CISO can't prioritize security effectively.

Lavera 1 year ago

I remember discussing how a compliance-centric agenda can limit the effectiveness of security initiatives. It feels like a major concern here.

Francene 1 year ago

I'm not entirely sure, but I think the lack of sponsorship from executive management could really hinder the CISO's ability to implement changes.

Joesph 1 year ago

I'm a bit unsure on this one. Is it something to do with problem-solving or business value? I'll need to review my notes to be sure.

Carlene 1 year ago

This is a tough one. Removing the public IP addresses is the goal, but we still need to give the SREs a way to access the bastion host. I'm leaning towards the Cloud VPN or Identity-Aware Proxy options, but I'll need to double-check the specifics to make sure I'm choosing the right solution.

Garry 1 year ago

I think there was a practice question that asked about this, and I might have selected 25 percent. Was that the right context?

EC-Council 712-50 Exam - Topic 5 Question 32 Discussion