EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 201:

  The rate of change in technology increases the importance of:

  A. Outsourcing the IT functions.
  B. Understanding user requirements.
  C. Hiring personnel with leading edge skills.
  D. Implementing and enforcing good processes.
  D. Implementing and enforcing good processes.

• Question 202:

  A missing/ineffective security control is identified. Which of the following should be the NEXT step?

  A. Perform an audit to measure the control formally
  B. Escalate the issue to the IT organization
  C. Perform a risk assessment to measure risk
  D. Establish Key Risk Indicators
  C. Perform a risk assessment to measure risk

• Question 203:

  Which of the following should be determined while defining risk management strategies?

  A. Organizational objectives and risk tolerance
  B. Risk assessment criteria
  C. IT architecture complexity
  D. Enterprise disaster recovery plans
  A. Organizational objectives and risk tolerance

• Question 204:

  Your incident response plan should include which of the following?

  A. Procedures for litigation
  B. Procedures for reclamation
  C. Procedures for classification
  D. Procedures for charge-back
  C. Procedures for classification

• Question 205:

  IT control objectives are useful to IT auditors as they provide the basis for understanding the:

  A. Desired results or purpose of implementing specific control procedures.
  B. The audit control checklist.
  C. Techniques for securing information.
  D. Security policy
  A. Desired results or purpose of implementing specific control procedures.

• Question 206:

  Which of the following organizations is typically in charge of validating the implementation and effectiveness of security controls?

  A. Security Administrators
  B. Internal/External Audit
  C. Risk Management
  D. Security Operations
  B. Internal/External Audit

• Question 207:

  Which regulation or policy governs protection of personally identifiable user data gathered during a cyber investigation?

  A. ITIL
  B. Privacy Act
  C. Sarbanes Oxley
  D. PCI-DSS
  B. Privacy Act

• Question 208:

  When would it be more desirable to develop a set of decentralized security policies and procedures within an enterprise environment?

  A. When there is a need to develop a more unified incident response capability.
  B. When the enterprise is made up of many business units with diverse business activities, risks profiles and regulatory requirements.
  C. When there is a variety of technologies deployed in the infrastructure.
  D. When it results in an overall lower cost of operating the security program.
  B. When the enterprise is made up of many business units with diverse business activities, risks profiles and regulatory requirements.

• Question 209:

  Which of the following intellectual Property components is focused on maintaining brand recognition?

  A. Trademark
  B. Patent
  C. Research Logs
  D. Copyright
  A. Trademark

• Question 210:

  What type of attack requires the least amount of technical equipment and has the highest success rate?

  A. War driving
  B. Operating system attacks
  C. Social engineering
  D. Shrink wrap attack
  C. Social engineering