EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 11:

  Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.

  Which of the following would be the FIRST step when addressing Information Security formally and consistently in this organization?

  A. Contract a third party to perform a security risk assessment
  B. Define formal roles and responsibilities for Internal audit functions
  C. Define formal roles and responsibilities for Information Security
  D. Create an executive security steering committee
  C. Define formal roles and responsibilities for Information Security

• Question 12:

  An organization has a number of Local Area Networks (LANs) linked to form a single Wide Area Network (WAN). Which of the following would BEST ensure network continuity?

  A. Third-party emergency repair contract
  B. Pre-built servers and routers
  C. Permanent alternative routing
  D. Full off-site backup of every server
  C. Permanent alternative routing

• Question 13:

  What role should the CISO play in properly scoping a PCI environment?

  A. Validate the business units' suggestions as to what should be included in the scoping process
  B. Work with a Qualified Security Assessor (QSA) to determine the scope of the PCI environment
  C. Ensure internal scope validation is completed and that an assessment has been done to discover all credit card data
  D. Complete the self-assessment questionnaire and work with an Approved Scanning Vendor (ASV) to determine scope
  C. Ensure internal scope validation is completed and that an assessment has been done to discover all credit card data

• Question 14:

  Which of the following is the BEST indicator of a successful project?

  A. it is completed on time or early as compared to the baseline project plan
  B. it meets most of the specifications as outlined in the approved project definition
  C. it comes in at or below the expenditures planned for in the baseline budget
  D. the deliverables are accepted by the key stakeholders
  D. the deliverables are accepted by the key stakeholders

• Question 15:

  SCENARIO: A CISO has several two-factor authentication systems under review and selects the one that is most sufficient and least costly. The implementation project planning is completed and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization's needs.

  The CISO discovers the scalability issue will only impact a small number of network segments. What is the next logical step to ensure the proper application of risk management methodology within the two-facto implementation project?

  A. Create new use cases for operational use of the solution
  B. Determine if sufficient mitigating controls can be applied
  C. Decide to accept the risk on behalf of the impacted business units
  D. Report the deficiency to the audit team and create process exceptions
  B. Determine if sufficient mitigating controls can be applied

• Question 16:

  Which of the following is MOST useful when developing a business case for security initiatives?

  A. Budget forecasts
  B. Request for proposals
  C. Cost/benefit analysis
  D. Vendor management
  C. Cost/benefit analysis

• Question 17:

  The CIO of an organization has decided to assign the responsibility of internal IT audit to the IT team. This is consider a bad practice MAINLY because

  A. The IT team is not familiar in IT audit practices
  B. This represents a bad implementation of the Least Privilege principle
  C. This represents a conflict of interest
  D. The IT team is not certified to perform audits
  C. This represents a conflict of interest

• Question 18:

  Which of the following activities results in change requests?

  A. Preventive actions
  B. Inspection
  C. Defect repair
  D. Corrective actions
  C. Defect repair

• Question 19:

  What is one key difference between Capital expenditures and Operating expenditures?

  A. Operating expense cannot be written off while Capital expense can
  B. Operating expenses can be depreciated over time and Capital expenses cannot
  C. Capital expenses cannot include salaries and Operating expenses can
  D. Capital expenditures allow for the cost to be depreciated over time and Operating does not
  C. Capital expenses cannot include salaries and Operating expenses can

• Question 20:

  In accordance with best practices and international standards, how often is security awareness training provided to employees of an organization?

  A. High risk environments 6 months, low risk environments 12 months
  B. Every 12 months
  C. Every 18 months
  D. Every six months
  B. Every 12 months