EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 311:

  As the CISO, you have been tasked with the execution of the company's key management program. You MUST ensure the integrity of encryption keys at the point of generation. Which principal of encryption key control will ensure no single individual can constitute or re-constitute a key?

  A. Dual Control
  B. Separation of Duties
  C. Split Knowledge
  D. Least Privilege
  A. Dual Control

• Question 312:

  In which of the following cases, would an organization be more prone to risk acceptance vs. risk mitigation?

  A. The organization uses exclusively a quantitative process to measure risk
  B. The organization uses exclusively a qualitative process to measure risk
  C. The organization's risk tolerance is high
  D. The organization's risk tolerance is lo
  C. The organization's risk tolerance is high

• Question 313:

  Access Control lists (ACLs), Firewalls, and Intrusion Prevention Systems are examples of

  A. Network based security preventative controls
  B. Software segmentation controls
  C. Network based security detective controls
  D. User segmentation controls
  A. Network based security preventative controls

• Question 314:

  A key cybersecurity feature of a Personal Identification Verification (PIV) Card is:

  A. Inability to export the private certificate/key
  B. It can double as physical identification at the DMV
  C. It has the user's photograph to help ID them
  D. It can be used as a secure flash drive
  C. It has the user's photograph to help ID them

• Question 315:

  The ultimate goal of an IT security projects is:

  A. Increase stock value
  B. Complete security
  C. Support business requirements
  D. Implement information security policies
  C. Support business requirements

• Question 316:

  Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN.

  Once supervisors and data owners have approved requests, information system administrators will implement

  A. Technical control(s)
  B. Management control(s)
  C. Policy control(s)
  D. Operational control(s)
  A. Technical control(s)

• Question 317:

  SCENARIO: A CISO has several two-factor authentication systems under review and selects the one that is most sufficient and least costly. The implementation project planning is completed and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization's needs.

  The CISO is unsure of the information provided and orders a vendor proof of concept to validate the system's scalability. This demonstrates which of the following?

  A. An approach that allows for minimum budget impact if the solution is unsuitable
  B. A methodology-based approach to ensure authentication mechanism functions
  C. An approach providing minimum time impact to the implementation schedules
  D. A risk-based approach to determine if the solution is suitable for investment
  D. A risk-based approach to determine if the solution is suitable for investment

• Question 318:

  Why is it vitally important that senior management endorse a security policy?

  A. So that they will accept ownership for security within the organization.
  B. So that employees will follow the policy directives.
  C. So that external bodies will recognize the organizations commitment to security.
  D. So that they can be held legally accountable.
  A. So that they will accept ownership for security within the organization.

• Question 319:

  The executive board has requested that the CISO of an organization define and Key Performance Indicators (KPI) to measure the effectiveness of the security awareness program provided to call center employees. Which of the following can be used as a KPI?

  A. Number of callers who report security issues.
  B. Number of callers who report a lack of customer service from the call center
  C. Number of successful social engineering attempts on the call center
  D. Number of callers who abandon the call before speaking with a representative
  C. Number of successful social engineering attempts on the call center

• Question 320:

  An organization has defined a set of standard security controls. This organization has also defined the circumstances and conditions in which they must be applied. What is the NEXT logical step in applying the controls in the organization?

  A. Determine the risk tolerance
  B. Perform an asset classification
  C. Create an architecture gap analysis
  D. Analyze existing controls on systems
  B. Perform an asset classification