ECCouncil 712-50 (EC-Council Certified CISO) Practice Test 21

Question 200

A manager repeats the same approval mistakes because authority was delegated without review. What should the decision-maker choose?

  1. Delegation of authority matrix
  2. Delegation feedback loop
  3. RACI for initiatives
  4. Outcome-based delegation

Explanation

Correct Answer

B:

Feedback uses timely evidence, coaching, and adjustments to improve delegated decisions. By contrast, Delegation of authority matrix is relevant when regional heads approve high-risk exceptions without knowing their risk limits, not as a substitute for Delegation feedback loop in this case.

Incorrect Answers

A:

An authority matrix sets who may approve what level of decision and when escalation is required; deploying it would matter if regional heads approve high-risk exceptions without knowing their risk limits, but the deciding issue here is that a manager repeats the same approval mistakes because authority was delegated without review.

C:

RACI clarifies the single accountable authority while distinguishing doers, advisers, and recipients; such an effect addresses a situation where the identity migration has overlapping owners and stakeholders do not know whose input is mandatory rather than the situation where a manager repeats the same approval mistakes because authority was delegated without review.

D:

Outcome delegation defines deliverables, guardrails, and accountability while granting execution discretion; its proper use case is one in which a capable manager gets endless task instructions instead of an agreed result and boundaries, not one in which a manager repeats the same approval mistakes because authority was delegated without review.

Question 201

A CISO is preparing future leaders and reducing single-person dependency. A potential successor has broad ambition but no mapped skill milestones. What is the best-targeted intervention?

  1. Individual development plan
  2. Knowledge transfer plan
  3. Leadership rotation
  4. Mentoring relationship

Explanation

Correct Answer

A:

A development plan links specific capability gaps to practice, feedback, and dates. By contrast, Knowledge transfer plan is relevant when one engineer alone knows the organization's certificate-recovery procedures, not as a substitute for Individual development plan in this case.

Incorrect Answers

B:

Transfer plans document practice and distribute critical operational knowledge before staff departure; the condition for this measure is that one engineer alone knows the organization's certificate-recovery procedures, whereas the current question concerns a case where a potential successor has broad ambition but no mapped skill milestones.

C:

Rotations expose talent to governance, operations, risk, and business constraints; it would be a fit if future directors understand only one function and cannot make enterprise-wide trade-offs, whereas the required response must deal with the fact that a potential successor has broad ambition but no mapped skill milestones.

D:

Mentoring shares judgment, networks, and career learning rather than issuing operational commands; the condition under which it applies is that a new manager needs long-term perspective from an experienced executive outside their reporting line, unlike the condition in the question, where a potential successor has broad ambition but no mapped skill milestones.

Question 202

A strong technical lead needs experience negotiating a cross-functional budget. What should the decision-maker choose?

  1. Stretch assignment
  2. Leadership rotation
  3. Individual development plan
  4. Interim coverage protocol

Explanation

Correct Answer

A:

Stretch work creates controlled exposure to new leadership responsibilities with support. By contrast, Individual development plan is relevant when a potential successor has broad ambition but no mapped skill milestones, not as a substitute for Stretch assignment in this case.

Incorrect Answers

B:

Rotations expose talent to governance, operations, risk, and business constraints; this provides its benefit when future directors understand only one function and cannot make enterprise-wide trade-offs; the matter at hand is instead that a strong technical lead needs experience negotiating a cross-functional budget.

C:

A development plan links specific capability gaps to practice, feedback, and dates; the condition under which it applies is that a potential successor has broad ambition but no mapped skill milestones, unlike the condition in the question, where a strong technical lead needs experience negotiating a cross-functional budget.

D:

Interim coverage assigns temporary decision rights, contacts, and limits in advance; that helps with the separate case where the CISO will be unavailable during a critical transaction and authority must not stall, not with the issue that a strong technical lead needs experience negotiating a cross-functional budget.

Question 203

A new manager needs long-term perspective from an experienced executive outside their reporting line. What action would satisfy this constraint most directly?

  1. Knowledge transfer plan
  2. Mentoring relationship
  3. Leadership rotation
  4. Succession readiness criteria

Explanation

Correct Answer

B:

Mentoring shares judgment, networks, and career learning rather than issuing operational commands. By contrast, Knowledge transfer plan is relevant when one engineer alone knows the organization's certificate-recovery procedures, not as a substitute for Mentoring relationship in this case.

Incorrect Answers

A:

Transfer plans document practice and distribute critical operational knowledge before staff departure; it helps when one engineer alone knows the organization's certificate-recovery procedures, whereas the present requirement arises because a new manager needs long-term perspective from an experienced executive outside their reporting line.

C:

Rotations expose talent to governance, operations, risk, and business constraints; this is pertinent when future directors understand only one function and cannot make enterprise-wide trade-offs, in contrast with the actual gap where a new manager needs long-term perspective from an experienced executive outside their reporting line.

D:

Readiness criteria define demonstrated skills, availability, and remaining preparation; the condition under which it applies is that several employees are named as successors without evidence they can assume an emergency role, unlike the condition in the question, where a new manager needs long-term perspective from an experienced executive outside their reporting line.

Question 204

A manager repeatedly mishandles tense stakeholder meetings and needs observable behavioral feedback. What approach should the accountable team prioritize?

  1. Individual development plan
  2. Coaching session
  3. Leadership rotation
  4. Succession readiness criteria
  5. Stretch assignment

Explanation

Correct Answer

B:

Coaching targets specific performance with reflection, practice, and iterative feedback. By contrast, Leadership rotation is relevant when future directors understand only one function and cannot make enterprise-wide trade-offs, not as a substitute for Coaching session in this case.

Incorrect Answers

A:

A development plan links specific capability gaps to practice, feedback, and dates; it helps when a potential successor has broad ambition but no mapped skill milestones, whereas the present requirement arises because a manager repeatedly mishandles tense stakeholder meetings and needs observable behavioral feedback.

C:

Rotations expose talent to governance, operations, risk, and business constraints; it helps when future directors understand only one function and cannot make enterprise-wide trade-offs, whereas the present requirement arises because a manager repeatedly mishandles tense stakeholder meetings and needs observable behavioral feedback.

D:

Readiness criteria define demonstrated skills, availability, and remaining preparation; that is relevant if several employees are named as successors without evidence they can assume an emergency role, but it does not directly resolve the need arising when a manager repeatedly mishandles tense stakeholder meetings and needs observable behavioral feedback.

E:

Stretch work creates controlled exposure to new leadership responsibilities with support; that is relevant if a strong technical lead needs experience negotiating a cross-functional budget, but it does not directly resolve the need arising when a manager repeatedly mishandles tense stakeholder meetings and needs observable behavioral feedback.

Question 205

Several employees are named as successors without evidence they can assume an emergency role. What is the best-targeted intervention?

  1. Leadership rotation
  2. Individual development plan
  3. Succession readiness criteria
  4. Interim coverage protocol

Explanation

Correct Answer

C:

Readiness criteria define demonstrated skills, availability, and remaining preparation. By contrast, Leadership rotation is relevant when future directors understand only one function and cannot make enterprise-wide trade-offs, not as a substitute for Succession readiness criteria in this case.

Incorrect Answers

A:

Rotations expose talent to governance, operations, risk, and business constraints; this provides its benefit when future directors understand only one function and cannot make enterprise-wide trade-offs; the matter at hand is instead that several employees are named as successors without evidence they can assume an emergency role.

B:

A development plan links specific capability gaps to practice, feedback, and dates; the condition under which it applies is that a potential successor has broad ambition but no mapped skill milestones, unlike the condition in the question, where several employees are named as successors without evidence they can assume an emergency role.

D:

Interim coverage assigns temporary decision rights, contacts, and limits in advance; it would be a fit if the CISO will be unavailable during a critical transaction and authority must not stall, whereas the required response must deal with the fact that several employees are named as successors without evidence they can assume an emergency role.

Question 206

One engineer alone knows the organization's certificate-recovery procedures. What should the decision-maker choose?

  1. Interim coverage protocol
  2. Knowledge transfer plan
  3. Mentoring relationship
  4. Individual development plan

Explanation

Correct Answer

B:

Transfer plans document practice and distribute critical operational knowledge before staff departure. By contrast, Interim coverage protocol is relevant when the CISO will be unavailable during a critical transaction and authority must not stall, not as a substitute for Knowledge transfer plan in this case.

Incorrect Answers

A:

Interim coverage assigns temporary decision rights, contacts, and limits in advance; the condition for this measure is that the CISO will be unavailable during a critical transaction and authority must not stall, whereas the current question concerns a case where one engineer alone knows the organization's certificate-recovery procedures.

C:

Mentoring shares judgment, networks, and career learning rather than issuing operational commands; that helps with the separate case where a new manager needs long-term perspective from an experienced executive outside their reporting line, not with the issue that one engineer alone knows the organization's certificate-recovery procedures.

D:

A development plan links specific capability gaps to practice, feedback, and dates; this is pertinent when a potential successor has broad ambition but no mapped skill milestones, in contrast with the actual gap where one engineer alone knows the organization's certificate-recovery procedures.

Question 207

Future directors understand only one function and cannot make enterprise-wide trade-offs. What action would satisfy this constraint most directly?

  1. Mentoring relationship
  2. Interim coverage protocol
  3. Succession readiness criteria
  4. Leadership rotation

Explanation

Correct Answer

D:

Rotations expose talent to governance, operations, risk, and business constraints. By contrast, Mentoring relationship is relevant when a new manager needs long-term perspective from an experienced executive outside their reporting line, not as a substitute for Leadership rotation in this case.

Incorrect Answers

A:

Mentoring shares judgment, networks, and career learning rather than issuing operational commands; the condition for this measure is that a new manager needs long-term perspective from an experienced executive outside their reporting line, whereas the current question concerns a case where future directors understand only one function and cannot make enterprise-wide trade-offs.

B:

Interim coverage assigns temporary decision rights, contacts, and limits in advance; that is relevant if the CISO will be unavailable during a critical transaction and authority must not stall, but it does not directly resolve the need arising when future directors understand only one function and cannot make enterprise-wide trade-offs.

C:

Readiness criteria define demonstrated skills, availability, and remaining preparation; that is relevant if several employees are named as successors without evidence they can assume an emergency role, but it does not directly resolve the need arising when future directors understand only one function and cannot make enterprise-wide trade-offs.

Question 208

The CISO will be unavailable during a critical transaction and authority must not stall. What approach should the accountable team prioritize?

  1. Knowledge transfer plan
  2. Interim coverage protocol
  3. Individual development plan
  4. Succession readiness criteria

Explanation

Correct Answer

B:

Interim coverage assigns temporary decision rights, contacts, and limits in advance. By contrast, Succession readiness criteria is relevant when several employees are named as successors without evidence they can assume an emergency role, not as a substitute for Interim coverage protocol in this case.

Incorrect Answers

A:

Transfer plans document practice and distribute critical operational knowledge before staff departure; that is relevant if one engineer alone knows the organization's certificate-recovery procedures, but it does not directly resolve the need arising when the CISO will be unavailable during a critical transaction and authority must not stall.

C:

A development plan links specific capability gaps to practice, feedback, and dates; its proper use case is one in which a potential successor has broad ambition but no mapped skill milestones, not one in which the CISO will be unavailable during a critical transaction and authority must not stall.

D:

Readiness criteria define demonstrated skills, availability, and remaining preparation; it would be a fit if several employees are named as successors without evidence they can assume an emergency role, whereas the required response must deal with the fact that the CISO will be unavailable during a critical transaction and authority must not stall.

Question 209

A distributed cybersecurity organization is trying to improve collaboration and retention. Junior responders remain silent when they observe flaws in a senior architect's assumptions. What action would satisfy this constraint most directly?

  1. Cultural intelligence
  2. Blameless learning review
  3. Accessible training design
  4. Facilitated team-conflict mediation
  5. Inclusive meeting facilitation
  6. Psychological safety practices

Explanation

Correct Answer

F:

Psychological safety allows respectful challenge without fear of humiliation or retaliation. By contrast, Inclusive meeting facilitation is relevant when remote staff are systematically excluded when headquarters makes decisions informally, not as a substitute for Psychological safety practices in this case.

Incorrect Answers

A:

Cultural intelligence adapts interpretation and collaboration without stereotyping individuals; that helps with the separate case where a multinational team misunderstands indirect disagreement from a regional colleague, not with the issue that junior responders remain silent when they observe flaws in a senior architect's assumptions.

B:

Learning reviews analyze system contributors without confusing honest error with misconduct; this is pertinent when after an outage, staff hide timeline details because leaders are searching for a scapegoat, in contrast with the actual gap where junior responders remain silent when they observe flaws in a senior architect's assumptions.

C:

Accessible formats provide equitable learning while maintaining the same performance expectations; this provides its benefit when important security guidance excludes employees who rely on assistive technologies; the matter at hand is instead that junior responders remain silent when they observe flaws in a senior architect's assumptions.

D:

Neutral mediation establishes safe participation rules, hears each party, and agrees practical behavior changes without requiring junior staff to confront senior colleagues alone; it helps when two senior engineers repeatedly interrupt junior staff during incident reviews and a neutral process is needed to resolve the conflict, whereas the present requirement arises because junior responders remain silent when they observe flaws in a senior architect's assumptions.

E:

Facilitation creates equitable participation and transparent decision records; its proper use case is one in which remote staff are systematically excluded when headquarters makes decisions informally, not one in which junior responders remain silent when they observe flaws in a senior architect's assumptions.

Question 210

The program has two different deficiencies: (1) similar achievements earn very different ratings across teams without defined criteria; (2) remote staff are systematically excluded when headquarters makes decisions informally. Which TWO options directly satisfy these requirements? Choose TWO.

  1. Fair performance calibration
  2. Accessible training design
  3. Facilitated team-conflict mediation
  4. Cultural intelligence
  5. Inclusive meeting facilitation
  6. Speak-up reporting channel

Explanation

Correct Answers

A:

For the requirement that similar achievements earn very different ratings across teams without defined criteria, calibration uses transparent job-related measures and checks inconsistent evaluation; Inclusive meeting facilitation separately addresses the need that remote staff are systematically excluded when headquarters makes decisions informally.

E:

For the requirement that remote staff are systematically excluded when headquarters makes decisions informally, facilitation creates equitable participation and transparent decision records; Fair performance calibration separately addresses the need that similar achievements earn very different ratings across teams without defined criteria.

Incorrect Answers

B:

Accessible formats provide equitable learning while maintaining the same performance expectations; that is relevant if important security guidance excludes employees who rely on assistive technologies, but it does not directly resolve the need arising when similar achievements earn very different ratings across teams without defined criteria; the other need in this item is that remote staff are systematically excluded when headquarters makes decisions informally.

C:

Neutral mediation establishes safe participation rules, hears each party, and agrees practical behavior changes without requiring junior staff to confront senior colleagues alone; its proper use case is one in which two senior engineers repeatedly interrupt junior staff during incident reviews and a neutral process is needed to resolve the conflict, not one in which similar achievements earn very different ratings across teams without defined criteria; the other need in this item is that remote staff are systematically excluded when headquarters makes decisions informally.

D:

Cultural intelligence adapts interpretation and collaboration without stereotyping individuals; the condition under which it applies is that a multinational team misunderstands indirect disagreement from a regional colleague, unlike the condition in the question, where remote staff are systematically excluded when headquarters makes decisions informally.

F:

Protected reporting supports escalation outside the implicated management chain; deploying it would matter if employees have no trusted mechanism to report unethical security conduct by managers, but the deciding issue here is that remote staff are systematically excluded when headquarters makes decisions informally.

EC-Council Certified CISO (712-50) Practice Tests