EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 111:

  Which of the following is the PRIMARY purpose of International Organization for Standardization (ISO) 27001?

  A. Use within an organization to formulate security requirements and objectives
  B. Implementation of business-enabling information security
  C. Use within an organization to ensure compliance with laws and regulations
  D. To enable organizations that adopt it to obtain certifications
  B. Implementation of business-enabling information security

• Question 112:

  Regulatory requirements typically force organizations to implement

  A. Mandatory controls
  B. Discretionary controls
  C. Optional controls
  D. Financial controls
  A. Mandatory controls

• Question 113:

  Security related breaches are assessed and contained through which of the following?

  A. The IT support team.
  B. A forensic analysis.
  C. Incident response
  D. Physical security team.
  C. Incident response

• Question 114:

  Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN.

  What type of control is being implemented by supervisors and data owners?

  A. Management
  B. Operational
  C. Technical
  D. Administrative
  B. Operational

• Question 115:

  Which of the following are necessary to formulate responses to external audit findings?

  A. Internal Audit, Management, and Technical Staff
  B. Internal Audit, Budget Authority, Management
  C. Technical Staff, Budget Authority, Management
  D. Technical Staff, Internal Audit, Budget Authority
  C. Technical Staff, Budget Authority, Management

• Question 116:

  The implementation of anti-malware and anti-phishing controls on centralized email servers is an example of what type of security control?

  A. Organization control
  B. Procedural control
  C. Management control
  D. Technical control
  D. Technical control

• Question 117:

  A CISO wants to change the defense strategy to ward off attackers. To accomplish this the CISO is looking to a strategy where attackers are lured into a zone of a safe network where attackers can be monitored, controlled, quarantined, or eradicated.

  A. Moderate investment
  B. Passive monitoring
  C. Integrated security controls
  D. Dynamic deception
  D. Dynamic deception

• Question 118:

  A recent audit has identified a few control exceptions and is recommending the implementation of technology and processes to address the finding. Which of the following is the MOST likely reason for the organization to reject the implementation of the recommended technology and processes?

  A. The auditors have not followed proper auditing processes
  B. The CIO of the organization disagrees with the finding
  C. The risk tolerance of the organization permits this risk
  D. The organization has purchased cyber insurance
  C. The risk tolerance of the organization permits this risk

• Question 119:

  A recommended method to document the respective roles of groups and individuals for a given process is to:

  A. Develop a detailed internal organization chart
  B. Develop a telephone call tree for emergency response
  C. Develop an isolinear response matrix with cost benefit analysis projections
  D. Develop a Responsible, Accountable, Consulted, Informed (RACI) chart
  D. Develop a Responsible, Accountable, Consulted, Informed (RACI) chart

• Question 120:

  Which of the following illustrates an operational control process:

  A. Classifying an information system as part of a risk assessment
  B. Installing an appropriate fire suppression system in the data center
  C. Conducting an audit of the configuration management process
  D. Establishing procurement standards for cloud vendors
  B. Installing an appropriate fire suppression system in the data center