EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 341:

  While designing a secondary data center for your company what document needs to be analyzed to determine to how much should be spent on building the data center?

  A. Enterprise Risk Assessment
  B. Disaster recovery strategic plan
  C. Business continuity plan
  D. Application mapping document
  B. Disaster recovery strategic plan

• Question 342:

  The establishment of a formal risk management framework and system authorization program is essential. The LAST step of the system authorization process is:

  A. Contacting the Internet Service Provider for an IP scope
  B. Getting authority to operate the system from executive management
  C. Changing the default passwords
  D. Conducting a final scan of the live system and mitigating all high and medium level vulnerabilities
  B. Getting authority to operate the system from executive management

• Question 343:

  Which of the following is the MOST important benefit of an effective security governance process?

  A. Reduction of liability and overall risk to the organization
  B. Better vendor management
  C. Reduction of security breaches
  D. Senior management participation in the incident response process
  A. Reduction of liability and overall risk to the organization

• Question 344:

  An access point (AP) is discovered using Wireless Equivalent Protocol (WEP). The ciphertext sent by the AP is encrypted with the same key and cipher used by its stations. What authentication method is being used?

  A. Shared key
  B. Asynchronous
  C. Open
  D. None
  A. Shared key

• Question 345:

  Which of the following is MOST important when dealing with an Information Security Steering committee:

  A. Include a mix of members from different departments and staff levels.
  B. Ensure that security policies and procedures have been vetted and approved.
  C. Review all past audit and compliance reports.
  D. Be briefed about new trends and products at each meeting by a vendor.
  C. Review all past audit and compliance reports.

• Question 346:

  Your company has limited resources to spend on security initiatives. The Chief Financial Officer asks you to prioritize the protection of information resources based on their value to the company. It is essential that you be able to communicate in language that your fellow executives will understand. You should:

  A. Create timelines for mitigation
  B. Develop a cost-benefit analysis
  C. Calculate annual loss expectancy
  D. Create a detailed technical executive summary
  B. Develop a cost-benefit analysis

• Question 347:

  The success of the Chief Information Security Officer is MOST dependent upon:

  A. favorable audit findings
  B. following the recommendations of consultants and contractors
  C. development of relationships with organization executives
  D. raising awareness of security issues with end users
  C. development of relationships with organization executives

• Question 348:

  Which type of scan is used on the eye to measure the layer of blood vessels?

  A. Facial recognition scan
  B. Iris scan
  C. Signature kinetics scan
  D. Retinal scan
  D. Retinal scan

• Question 349:

  A CISO sees abnormally high volumes of exceptions to security requirements and constant pressure from business units to change security processes. Which of the following represents the MOST LIKELY cause of this situation?

  A. Poor audit support for the security program
  B. A lack of executive presence within the security program
  C. Poor alignment of the security program to business needs
  D. This is normal since business units typically resist security requirements
  C. Poor alignment of the security program to business needs

• Question 350:

  When managing an Information Security Program, which of the following is of MOST importance in order to influence the culture of an organization?

  A. An independent Governance, Risk and Compliance organization
  B. Alignment of security goals with business goals
  C. Compliance with local privacy regulations
  D. Support from Legal and HR teams
  B. Alignment of security goals with business goals