EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 281:

  A new CISO just started with a company and on the CISO's desk is the last complete Information Security Management audit report. The audit report is over two years old. After reading it, what should be the CISO's FIRST priority?

  A. Have internal audit conduct another audit to see what has changed.
  B. Contract with an external audit company to conduct an unbiased audit
  C. Review the recommendations and follow up to see if audit implemented the changes
  D. Meet with audit team to determine a timeline for corrections
  C. Review the recommendations and follow up to see if audit implemented the changes

• Question 282:

  A newly-hired CISO needs to understand the organization's financial management standards for business units and operations. Which of the following would be the best source of this information?

  A. The internal accounting department
  B. The Chief Financial Officer (CFO)
  C. The external financial audit service
  D. The managers of the accounts payables and accounts receivables teams
  D. The managers of the accounts payables and accounts receivables teams

• Question 283:

  When choosing a risk mitigation method what is the MOST important factor?

  A. Approval from the board of directors
  B. Cost of the mitigation is less than the risk
  C. Metrics of mitigation method success
  D. Mitigation method complies with PCI regulations
  B. Cost of the mitigation is less than the risk

• Question 284:

  The PRIMARY objective for information security program development should be:

  A. Reducing the impact of the risk to the business.
  B. Establishing strategic alignment with business continuity requirements
  C. Establishing incident response programs.
  D. Identifying and implementing the best security solutions.
  A. Reducing the impact of the risk to the business.

• Question 285:

  Within an organization's vulnerability management program, who has the responsibility to implement remediation actions?

  A. Security officer
  B. Data owner
  C. Vulnerability engineer
  D. System administrator
  D. System administrator

• Question 286:

  Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.

  Which of the following frameworks and standards will BEST fit the organization as a baseline for their security program?

  A. NIST and Privacy Regulations
  B. ISO 27000 and Payment Card Industry Data Security Standards
  C. NIST and data breach notification laws
  D. ISO 27000 and Human resources best practices
  B. ISO 27000 and Payment Card Industry Data Security Standards

• Question 287:

  When analyzing and forecasting an operating expense budget what are not included?

  A. Software and hardware license fees
  B. Utilities and power costs
  C. Network connectivity costs
  D. New datacenter to operate from
  D. New datacenter to operate from

• Question 288:

  A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization. Which of the following principles does this best demonstrate?

  A. Alignment with the business
  B. Effective use of existing technologies
  C. Leveraging existing implementations
  D. Proper budget management
  A. Alignment with the business

• Question 289:

  In effort to save your company money which of the following methods of training results in the lowest cost for the organization?

  A. Distance learning/Web seminars
  B. Formal Class
  C. One-One Training
  D. Self -Study (noncomputerized)
  D. Self -Study (noncomputerized)

• Question 290:

  Which of the following is considered one of the most frequent failures in project management?

  A. Overly restrictive management
  B. Excessive personnel on project
  C. Failure to meet project deadlines
  D. Insufficient resources
  C. Failure to meet project deadlines