EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 261:

  The company decides to release the application without remediating the high-risk vulnerabilities. Which of the following is the MOST likely reason for the company to release the application?

  A. The company lacks a risk management process
  B. The company does not believe the security vulnerabilities to be real
  C. The company has a high risk tolerance
  D. The company lacks the tools to perform a vulnerability assessment
  C. The company has a high risk tolerance

• Question 262:

  What is the BEST reason for having a formal request for proposal process?

  A. Creates a timeline for purchasing and budgeting
  B. Allows small companies to compete with larger companies
  C. Clearly identifies risks and benefits before funding is spent
  D. Informs suppliers a company is going to make a purchase
  C. Clearly identifies risks and benefits before funding is spent

• Question 263:

  When a critical vulnerability has been discovered on production systems and needs to be fixed immediately, what is the BEST approach for a CISO to mitigate the vulnerability under tight budget constraints?

  A. Transfer financial resources from other critical programs
  B. Take the system off line until the budget is available
  C. Deploy countermeasures and compensating controls until the budget is available
  D. Schedule an emergency meeting and request the funding to fix the issue
  C. Deploy countermeasures and compensating controls until the budget is available

• Question 264:

  You are having a penetration test done on your company network and the leader of the team says they discovered all the network devices because no one had changed the Simple Network Management Protocol (SNMP) community strings from the defaults. Which of the following is a default community string?

  A. Execute
  B. Read
  C. Administrator
  D. Public
  D. Public

• Question 265:

  Which of the following represents the BEST method for obtaining business unit acceptance of security controls within an organization?

  A. Allow the business units to decide which controls apply to their systems, such as the encryption of sensitive data
  B. Create separate controls for the business units based on the types of business and functions they perform
  C. Ensure business units are involved in the creation of controls and defining conditions under which they must be applied
  D. Provide the business units with control mandates and schedules of audits for compliance validation
  C. Ensure business units are involved in the creation of controls and defining conditions under which they must be applied

• Question 266:

  Which of the following is MOST likely to be discretionary?

  A. Policies
  B. Procedures
  C. Guidelines
  D. Standards
  C. Guidelines

• Question 267:

  What is the definition of Risk in Information Security?

  A. Risk = Probability x Impact
  B. Risk = Threat x Probability
  C. Risk = Financial Impact x Probability D. Risk = Impact x Threat
  A. Risk = Probability x Impact

• Question 268:

  A digital signature addresses which of the following concerns?

  A. Message alteration
  B. Message copying
  C. Message theft
  D. Unauthorized reading
  A. Message alteration

• Question 269:

  With respect to the audit management process, management response serves what function?

  A. placing under performing units on notice for failing to meet standards
  B. determining whether or not resources will be allocated to remediate a finding
  C. adding controls to ensure that proper oversight is achieved by management
  D. revealing the "root cause" of the process failure and mitigating for all internal and external units
  B. determining whether or not resources will be allocated to remediate a finding

• Question 270:

  Which of the following is the MOST important reason to measure the effectiveness of an Information Security Management System (ISMS)?

  A. Meet regulatory compliance requirements
  B. Better understand the threats and vulnerabilities affecting the environment
  C. Better understand strengths and weaknesses of the program
  D. Meet legal requirements
  C. Better understand strengths and weaknesses of the program