EC-COUNCIL EC-COUNCIL Certifications 512-50 Questions & Answers

• Question 191:

  When managing the critical path of an IT security project, which of the following is MOST important?

  A. Knowing who all the stakeholders are.

  B. Knowing the people on the data center team.

  C. Knowing the threats to the organization.

  D. Knowing the milestones and timelines of deliverables.

  Correct Answer: D

• Question 192:

  A severe security threat has been detected on your corporate network. As CISO you quickly assemble key members of the Information Technology team and business operations to determine a modification to security controls in response to the threat. This is an example of:

  A. Change management

  B. Business continuity planning

  C. Security Incident Response

  D. Thought leadership

  Correct Answer: C

• Question 193:

  Which of the following is the MOST important component of any change management process?

  A. Scheduling

  B. Back-out procedures

  C. Outage planning

  D. Management approval

  Correct Answer: D

• Question 194:

  An application vulnerability assessment has identified a security flaw in an application. This is a flaw that was previously identified and remediated on a prior release of the application. Which of the following is MOST likely the reason for this recurring issue?

  A. Ineffective configuration management controls

  B. Lack of change management controls

  C. Lack of version/source controls

  D. High turnover in the application development department

  Correct Answer: C

• Question 195:

  Which of the following methodologies references the recommended industry standard that Information security project managers should follow?

  A. The Security Systems Development Life Cycle

  B. The Security Project And Management Methodology

  C. Project Management System Methodology

  D. Project Management Body of Knowledge

  Correct Answer: D

• Question 196:

  Which of the following is considered one of the most frequent failures in project management?

  A. Overly restrictive management

  B. Excessive personnel on project

  C. Failure to meet project deadlines

  D. Insufficient resources

  Correct Answer: C

• Question 197:

  How often should the Statements of Standards for Attestation Engagements-16 (SSAE16)/International Standard on Assurance Engagements 3402 (ISAE3402) report of your vendors be reviewed?

  A. Quarterly

  B. Semi-annually

  C. Bi-annually

  D. Annually

  Correct Answer: D

• Question 198:

  The organization does not have the time to remediate the vulnerability; however it is critical to release the application. Which of the following needs to be further evaluated to help mitigate the risks?

  A. Provide developer security training

  B. Deploy Intrusion Detection Systems

  C. Provide security testing tools

  D. Implement Compensating Controls

  Correct Answer: D

• Question 199:

  Which of the following will be MOST helpful for getting an Information Security project that is behind schedule back on schedule?

  A. Upper management support

  B. More frequent project milestone meetings

  C. More training of staff members

  D. Involve internal audit

  Correct Answer: A

• Question 200:

  You currently cannot provide for 24/7 coverage of your security monitoring and incident response duties and your company is resistant to the idea of adding more full-time employees to the payroll. Which combination of solutions would help to provide the coverage needed without the addition of more dedicated staff? (choose the best answer):

  A. Deploy a SEIM solution and have current staff review incidents first thing in the morning

  B. Contract with a managed security provider and have current staff on recall for incident response

  C. Configure your syslog to send SMS messages to current staff when target events are triggered

  D. Employ an assumption of breach protocol and defend only essential information resources

  Correct Answer: B