EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 301:

  A global retail organization is looking to implement a consistent Disaster Recovery and Business Continuity Process across all of its business units. Which of the following standards and guidelines can BEST address this organization's need?

  A. International Organization for Standardizations ?22301 (ISO-22301)
  B. Information Technology Infrastructure Library (ITIL)
  C. Payment Card Industry Data Security Standards (PCI-DSS)
  D. International Organization for Standardizations ?27005 (ISO-27005)
  A. International Organization for Standardizations ?22301 (ISO-22301)

• Question 302:

  Which of the following represents the BEST method of ensuring security program alignment to business needs?

  A. Create a comprehensive security awareness program and provide success metrics to business units
  B. Create security consortiums, such as strategic security planning groups, that include business unit participation
  C. Ensure security implementations include business unit testing and functional validation prior to production rollout
  D. Ensure the organization has strong executive-level security representation through clear sponsorship or the creation of a CISO role
  B. Create security consortiums, such as strategic security planning groups, that include business unit participation

• Question 303:

  Which of the following is used to lure attackers into false environments so they can be monitored, contained, or blocked from reaching critical systems?

  A. Segmentation controls.
  B. Shadow applications.
  C. Deception technology.
  D. Vulnerability management.
  B. Shadow applications.

• Question 304:

  You are the CISO of a commercial social media organization. The leadership wants to rapidly create new methods of sharing customer data through creative linkages with mobile devices. You have voiced concern about privacy regulations but the velocity of the business is given priority. Which of the following BEST describes this organization?

  A. Risk averse
  B. Risk tolerant
  C. Risk conditional
  D. Risk minimal
  B. Risk tolerant

• Question 305:

  According to ISO 27001, of the steps for establishing an Information Security Governance program listed below, which comes first?

  A. Identify threats, risks, impacts and vulnerabilities
  B. Decide how to manage risk
  C. Define the budget of the Information Security Management System
  D. Define Information Security Policy
  D. Define Information Security Policy

• Question 306:

  A CISO implements smart cards for credential management, and as a result has reduced costs associated with help desk operations supporting password resets. This demonstrates which of the following principles?

  A. Security alignment to business goals
  B. Regulatory compliance effectiveness
  C. Increased security program presence
  D. Proper organizational policy enforcement
  A. Security alignment to business goals

• Question 307:

  An international organization is planning a project to implement encryption technologies to protect company confidential information. This organization has data centers on three continents. Which of the following would be considered a MAJOR constraint for the project?

  A. Time zone differences
  B. Compliance to local hiring laws
  C. Encryption import/export regulations
  D. Local customer privacy laws
  C. Encryption import/export regulations

• Question 308:

  A stakeholder is a person or group:

  A. Vested in the success and/or failure of a project or initiative regardless of budget implications.
  B. Vested in the success and/or failure of a project or initiative and is tied to the project budget.
  C. That has budget authority.
  D. That will ultimately use the system.
  A. Vested in the success and/or failure of a project or initiative regardless of budget implications.

• Question 309:

  Scenario: The new CISO was informed of all the Information Security projects that the section has in progress. Two projects are over a year behind schedule and way over budget. Which of the following will be most helpful for getting an Information Security project that is behind schedule back on schedule?

  A. Upper management support
  B. More frequent project milestone meetings
  C. More training of staff members
  D. Involve internal audit
  A. Upper management support

• Question 310:

  Who is responsible for verifying that audit directives are implemented?

  A. IT Management
  B. Internal Audit
  C. IT Security
  D. BOD Audit Committee
  B. Internal Audit