EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 1:

  Which of the following is a symmetric encryption algorithm?

  A. 3DES
  B. MD5
  C. ECC
  D. RSA
  A. 3DES

• Question 2:

  Using the Transport Layer Security (TLS) protocol enables a client in a network to be:

  A. Provided with a digital signature
  B. Assured of the server's identity
  C. Identified by a network
  D. Registered by the server
  B. Assured of the server's identity

• Question 3:

  One of your executives needs to send an important and confidential email. You want to ensure that the message cannot be read by anyone but the recipient. Which of the following keys should be used to encrypt the message?

  A. Your public key
  B. The recipient's private key
  C. The recipient's public key
  D. Certificate authority key
  C. The recipient's public key

• Question 4:

  Which represents PROPER separation of duties in the corporate environment?

  A. Information Security and Identity Access Management teams perform two distinct functions
  B. Developers and Network teams both have admin rights on servers
  C. Finance has access to Human Resources data
  D. Information Security and Network teams perform two distinct functions
  D. Information Security and Network teams perform two distinct functions

• Question 5:

  When gathering security requirements for an automated business process improvement program, which of the following is MOST important?

  A. Type of data contained in the process/system
  B. Type of connection/protocol used to transfer the data
  C. Type of encryption required for the data once it is at rest
  D. Type of computer the data is processed on
  A. Type of data contained in the process/system

• Question 6:

  The effectiveness of social engineering penetration testing using phishing can be used as a Key Performance Indicator (KPI) for the effectiveness of an organization's

  A. Risk Management Program.
  B. Anti-Spam controls.
  C. Security Awareness Program.
  D. Identity and Access Management Program.
  C. Security Awareness Program.

• Question 7:

  The framework that helps to define a minimum standard of protection that business stakeholders must attempt to achieve is referred to as a standard of:

  A. Due Protection
  B. Due Care
  C. Due Compromise
  D. Due process
  B. Due Care

• Question 8:

  When creating a vulnerability scan schedule, who is the MOST critical person to communicate with in order to ensure impact of the scan is minimized?

  A. The asset owner
  B. The asset manager
  C. The data custodian
  D. The project manager
  A. The asset owner

• Question 9:

  Scenario: Your program is developed around minimizing risk to information by focusing on people, technology, and operations.

  An effective way to evaluate the effectiveness of an information security awareness program for end users, especially senior executives, is to conduct periodic:

  A. Controlled spear phishing campaigns
  B. Password changes
  C. Baselining of computer systems D. Scanning for viruses
  A. Controlled spear phishing campaigns

• Question 10:

  When briefing senior management on the creation of a governance process, the MOST important aspect should be:

  A. information security metrics.
  B. knowledge required to analyze each issue.
  C. baseline against which metrics are evaluated.
  D. linkage to business area objectives.
  D. linkage to business area objectives.