EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 211:

  This occurs when the quantity or quality of project deliverables is expanded from the original project plan.

  A. Scope creep
  B. Deadline extension
  C. Scope modification
  D. Deliverable expansion
  A. Scope creep

• Question 212:

  SCENARIO: Critical servers show signs of erratic behavior within your organization's intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team.

  During initial investigation, the team suspects criminal activity but cannot initially prove or disprove illegal actions. What is the MOST critical aspect of the team's activities?

  A. Regular communication of incident status to executives
  B. Eradication of malware and system restoration
  C. Determination of the attack source
  D. Preservation of information
  D. Preservation of information

• Question 213:

  Which of the following is considered to be an IT governance framework and a supporting toolset that allows for managers to bridge the gap between control requirements, technical issues, and business risks?

  A. Control Objective for Information Technology (COBIT)
  B. Committee of Sponsoring Organizations (COSO)
  C. Payment Card Industry (PCI)
  D. Information Technology Infrastructure Library (ITIL)
  A. Control Objective for Information Technology (COBIT)

• Question 214:

  In order for a CISO to have true situational awareness there is a need to deploy technology that can give a real-time view of security events across the enterprise. Which tool selection represents the BEST choice to achieve situational awareness?

  A. Vmware, router, switch, firewall, syslog, vulnerability management system (VMS)
  B. Intrusion Detection System (IDS), firewall, switch, syslog
  C. Security Incident Event Management (SIEM), IDS, router, syslog
  D. SIEM, IDS, firewall, VMS
  D. SIEM, IDS, firewall, VMS

• Question 215:

  A large number of accounts in a hardened system were suddenly compromised to an external party. Which of the following is the MOST probable threat actor involved in this incident?

  A. Poorly configured firewalls
  B. Malware
  C. Advanced Persistent Threat (APT)
  D. An insider
  D. An insider

• Question 216:

  A department within your company has proposed a third party vendor solution to address an urgent, critical business need. As the CISO you have been asked to accelerate screening of their security control claims. Which of the following vendor provided documents is BEST to make your decision:

  A. Vendor's client list of reputable organizations currently using their solution
  B. Vendor provided attestation of the detailed security controls from a reputable accounting firm
  C. Vendor provided reference from an existing reputable client detailing their implementation
  D. Vendor provided internal risk assessment and security control documentation
  B. Vendor provided attestation of the detailed security controls from a reputable accounting firm

• Question 217:

  Risk appetite is typically determined by which of the following organizational functions?

  A. Security
  B. Business units
  C. Board of Directors
  D. Audit and compliance
  C. Board of Directors

• Question 218:

  As the CISO for your company you are accountable for the protection of information resources commensurate with:

  A. Customer demand
  B. Cost and time to replace
  C. Insurability tables
  D. Risk of exposure
  D. Risk of exposure

• Question 219:

  Dataflow diagrams are used by IT auditors to:

  A. Order data hierarchically.
  B. Highlight high-level data definitions.
  C. Graphically summarize data paths and storage processes.
  D. Portray step-by-step details of data generation.
  C. Graphically summarize data paths and storage processes.

• Question 220:

  The new CISO was informed of all the Information Security projects that the organization has in progress. Two projects are over a year behind schedule and over budget. Using best business practices for project management you determine that the project correctly aligns with the company goals.

  Which of the following needs to be performed NEXT?

  A. Verify the scope of the project
  B. Verify the regulatory requirements
  C. Verify technical resources
  D. Verify capacity constraints
  A. Verify the scope of the project