EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 321:

  You manage a newly created Security Operations Center (SOC), your team is being inundated with security alerts and don't know what to do. What is the BEST approach to handle this situation?

  A. Tell the team to do their best and respond to each alert
  B. Tune the sensors to help reduce false positives so the team can react better
  C. Request additional resources to handle the workload
  D. Tell the team to only respond to the critical and high alerts
  B. Tune the sensors to help reduce false positives so the team can react better

• Question 322:

  An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System. Which of the following international standards can BEST assist this organization?

  A. International Organization for Standardizations ?27004 (ISO-27004)
  B. Payment Card Industry Data Security Standards (PCI-DSS)
  C. Control Objectives for Information Technology (COBIT)
  D. International Organization for Standardizations ?27005 (ISO-27005)
  A. International Organization for Standardizations ?27004 (ISO-27004)

• Question 323:

  As the Chief Information Security Officer, you want to ensure data shared securely, especially when shared with third parties outside the organization. What protocol provides the ability to extend the network perimeter with the use of encapsulation and encryption?

  A. File Transfer Protocol (FTP)
  B. Virtual Local Area Network (VLAN)
  C. Simple Mail Transfer Protocol
  D. Virtual Private Network (VPN)
  D. Virtual Private Network (VPN)

• Question 324:

  Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.

  Which of the following is the reason the CISO has not been able to advance the security agenda in this organization?

  A. Lack of identification of technology stake holders
  B. Lack of business continuity process
  C. Lack of influence with leaders outside IT
  D. Lack of a security awareness program
  C. Lack of influence with leaders outside IT

• Question 325:

  What is the primary reason for performing vendor management?

  A. To understand the risk coverage that are being mitigated by the vendor
  B. To establish a vendor selection process
  C. To document the relationship between the company and the vendor
  D. To define the partnership for long-term success
  A. To understand the risk coverage that are being mitigated by the vendor

• Question 326:

  Which of the following best describes the purpose of the International Organization for Standardization (ISO) 27002 standard?

  A. To give information security management recommendations to those who are responsible for initiating, implementing, or maintaining security in their organization.
  B. To provide a common basis for developing organizational security standards
  C. To provide effective security management practice and to provide confidence in inter- organizational dealings
  D. To established guidelines and general principles for initiating, implementing, maintaining, and improving information security management within an organization
  D. To established guidelines and general principles for initiating, implementing, maintaining, and improving information security management within an organization

• Question 327:

  The security team has investigated the theft/loss of several unencrypted laptop computers containing sensitive corporate information. To prevent the loss of any additional corporate data it is unilaterally decided by the CISO that all existing and future laptop computers will be encrypted. Soon, the help desk is flooded with complaints about the slow performance of the laptops and users are upset. What did the CISO do wrong? (choose the BEST answer):

  A. Failed to identify all stakeholders and their needs
  B. Deployed the encryption solution in an inadequate manner
  C. Used 1024 bit encryption when 256 bit would have sufficed
  D. Used hardware encryption instead of software encryption
  A. Failed to identify all stakeholders and their needs

• Question 328:

  The risk found after a control has been fully implemented is called:

  A. Residual Risk
  B. Total Risk
  C. Post implementation risk
  D. Transferred risk
  A. Residual Risk

• Question 329:

  Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.

  The organization has already been subject to a significant amount of credit card fraud. Which of the following is the MOST likely reason for this fraud?

  A. Lack of compliance to the Payment Card Industry (PCI) standards
  B. Ineffective security awareness program
  C. Security practices not in alignment with ISO 27000 frameworks
  D. Lack of technical controls when dealing with credit card data
  A. Lack of compliance to the Payment Card Industry (PCI) standards

• Question 330:

  In terms of supporting a forensic investigation, it is now imperative that managers, first- responders, etc., accomplish the following actions to the computer under investigation:

  A. Secure the area and shut-down the computer until investigators arrive
  B. Secure the area and attempt to maintain power until investigators arrive
  C. Immediately place hard drive and other components in an anti-static bag
  D. Secure the area.
  B. Secure the area and attempt to maintain power until investigators arrive