EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 351:

  SCENARIO: Critical servers show signs of erratic behavior within your organization's intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team.

  In what phase of the response will the team extract information from the affected systems without altering original data?

  A. Response
  B. Investigation
  C. Recovery
  D. Follow-up
  B. Investigation

• Question 352:

  Which of the following best describes a portfolio?

  A. The portfolio is used to manage and track individual projects
  B. The portfolio is used to manage incidents and events
  C. A portfolio typically consists of several programs
  D. A portfolio delivers one specific service or program to the business
  C. A portfolio typically consists of several programs

• Question 353:

  Which of the following is a countermeasure to prevent unauthorized database access from web applications?

  A. Session encryption
  B. Removing all stored procedures
  C. Input sanitization
  D. Library control
  C. Input sanitization

• Question 354:

  Which of the following statements about Encapsulating Security Payload (ESP) is true?

  A. It is an IPSec protocol.
  B. It is a text-based communication protocol.
  C. It uses TCP port 22 as the default port and operates at the application layer.
  D. It uses UDP port 22
  A. It is an IPSec protocol.

• Question 355:

  Which of the following activities must be completed BEFORE you can calculate risk?

  A. Determining the likelihood that vulnerable systems will be attacked by specific threats
  B. Calculating the risks to which assets are exposed in their current setting
  C. Assigning a value to each information asset
  D. Assessing the relative risk facing the organization's information assets
  C. Assigning a value to each information asset

• Question 356:

  When analyzing and forecasting a capital expense budget what are not included?

  A. Network connectivity costs
  B. New datacenter to operate from
  C. Upgrade of mainframe
  D. Purchase of new mobile devices to improve operations
  A. Network connectivity costs

• Question 357:

  Involvement of senior management is MOST important in the development of:

  A. IT security implementation plans.
  B. Standards and guidelines.
  C. IT security policies.
  D. IT security procedures.
  C. IT security policies.

• Question 358:

  Your incident handling manager detects a virus attack in the network of your company. You develop a signature based on the characteristics of the detected virus. Which of the following phases in the incident handling process will utilize the signature to resolve this incident?

  A. Containment
  B. Recovery
  C. Identification
  D. Eradication
  D. Eradication

• Question 359:

  You work as a project manager for TYU project. You are planning for risk mitigation. You need to quickly identify high-level risks that will need a more in-depth analysis. Which of the following activities will help you in this?

  A. Qualitative analysis
  B. Quantitative analysis
  C. Risk mitigation
  D. Estimate activity duration
  A. Qualitative analysis

• Question 360:

  When project costs continually increase throughout implementation due to large or rapid changes in customer or user requirements, this is commonly known as:

  A. Cost/benefit adjustments
  B. Scope creep
  C. Prototype issues
  D. Expectations management
  B. Scope creep