EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 331:

  Which of the following BEST describes an international standard framework that is based on the security model Information Technology-Code of Practice for Information Security Management?

  A. International Organization for Standardization 27001
  B. National Institute of Standards and Technology Special Publication SP 800-12
  C. Request For Comment 2196
  D. National Institute of Standards and Technology Special Publication SP 800-26
  A. International Organization for Standardization 27001

• Question 332:

  When selecting a security solution with reoccurring maintenance costs after the first year (choose the BEST answer):

  A. The CISO should cut other essential programs to ensure the new solution's continued use
  B. Communicate future operating costs to the CIO/CFO and seek commitment from them to ensure the new solution's continued use
  C. Defer selection until the market improves and cash flow is positive
  D. Implement the solution and ask for the increased operating cost budget when it is time
  B. Communicate future operating costs to the CIO/CFO and seek commitment from them to ensure the new solution's continued use

• Question 333:

  Which one of the following BEST describes which member of the management team is accountable for the day-to-day operation of the information security program?

  A. Security administrators
  B. Security mangers
  C. Security technicians
  D. Security analysts
  B. Security mangers

• Question 334:

  Which of the following is considered the MOST effective tool against social engineering?

  A. Anti-phishing tools
  B. Anti-malware tools
  C. Effective Security Vulnerability Management Program
  D. Effective Security awareness program
  D. Effective Security awareness program

• Question 335:

  Which of the following will be MOST helpful for getting an Information Security project that is behind schedule back on schedule?

  A. Upper management support
  B. More frequent project milestone meetings
  C. More training of staff members
  D. Involve internal audit
  A. Upper management support

• Question 336:

  Which of the following best describes revenue?

  A. Non-operating financial liabilities minus expenses
  B. The true profit-making potential of an organization
  C. The sum value of all assets and cash flow into the business
  D. The economic benefit derived by operating a business
  D. The economic benefit derived by operating a business

• Question 337:

  An organization's firewall technology needs replaced. A specific technology has been selected that is less costly than others and lacking in some important capabilities. The security officer has voiced concerns about sensitive data breaches but the decision is made to purchase. What does this selection indicate?

  A. A high threat environment
  B. A low risk tolerance environment
  C. I low vulnerability environment
  D. A high risk tolerance environment
  D. A high risk tolerance environment

• Question 338:

  Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.

  From an Information Security Leadership perspective, which of the following is a MAJOR concern about the CISO's approach to security?

  A. Compliance centric agenda
  B. IT security centric agenda
  C. Lack of risk management process
  D. Lack of sponsorship from executive management
  B. IT security centric agenda

• Question 339:

  Which of the following strategies provides the BEST response to a ransomware attack?

  A. Real-time off-site replication
  B. Daily incremental backup
  C. Daily full backup
  D. Daily differential backup
  B. Daily incremental backup

• Question 340:

  Simon had all his systems administrators implement hardware and software firewalls to ensure network security. They implemented IDS/IPS systems throughout the network to check for and stop any unauthorized traffic that may attempt to enter. Although Simon and his administrators believed they were secure, a hacker group was able to get into the network and modify files hosted on the company's website.

  After searching through the firewall and server logs, no one could find how the attackers were able to get in. He decides that the entire network needs to be monitored for critical and essential file changes. This monitoring tool alerts administrators when a critical file is altered.

  What tool could Simon and his administrators implement to accomplish this?

  A. They need to use Nessus.
  B. They can implement Wireshark.
  C. Snort is the best tool for their situation.
  D. They could use Tripwire.
  C. Snort is the best tool for their situation.