EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 361:

  Scenario: Your company has many encrypted telecommunications links for their world-wide operations. Physically distributing symmetric keys to all locations has proven to be administratively burdensome, but symmetric keys are preferred to other alternatives.

  Symmetric encryption in general is preferable to asymmetric encryption when:

  A. The number of unique communication links is large
  B. The volume of data being transmitted is small
  C. The speed of the encryption / deciphering process is essential
  D. The distance to the end node is farthest away
  C. The speed of the encryption / deciphering process is essential

• Question 362:

  A customer of a bank has placed a dispute on a payment for a credit card account. The banking system uses digital signatures to safeguard the integrity of their transactions. The bank claims that the system shows proof that the customer in fact made the payment. What is this system capability commonly known as?

  A. non-repudiation
  B. conflict resolution
  C. strong authentication
  D. digital rights management
  A. non-repudiation

• Question 363:

  Which of the following best describes an access control process that confirms the identity of the entity seeking access to a logical or physical area?

  A. Identification
  B. Authorization
  C. Authentication
  D. Accountability
  B. Authorization

• Question 364:

  Scenario: You are the CISO and have just completed your first risk assessment for your organization. You find many risks with no security controls, and some risks with inadequate controls. You assign work to your staff to create or adjust

  existing security controls to ensure they are adequate for risk mitigation needs.

  When formulating the remediation plan, what is a required input?

  A. Board of directors
  B. Risk assessment
  C. Patching history
  D. Latest virus definitions file
  B. Risk assessment

• Question 365:

  Information security policies should be reviewed:

  A. by stakeholders at least annually
  B. by the CISO when new systems are brought online
  C. by the Incident Response team after an audit
  D. by internal audit semiannually
  A. by stakeholders at least annually

• Question 366:

  The ability to hold intruders accountable in a court of law is important. Which of the following activities are needed to ensure the highest possibility for successful prosecution?

  A. Well established and defined digital forensics process
  B. Establishing Enterprise-owned Botnets for preemptive attacks
  C. Be able to retaliate under the framework of Active Defense
  D. Collaboration with law enforcement
  A. Well established and defined digital forensics process

• Question 367:

  Which technology can provide a computing environment without requiring a dedicated hardware backend?

  A. Mainframe server
  B. Virtual Desktop
  C. Thin client
  D. Virtual Local Area Network
  B. Virtual Desktop

• Question 368:

  What is the main purpose of the Incident Response Team?

  A. Ensure efficient recovery and reinstate repaired systems
  B. Create effective policies detailing program activities
  C. Communicate details of information security incidents
  D. Provide current employee awareness programs
  A. Ensure efficient recovery and reinstate repaired systems

• Question 369:

  When working in the Payment Card Industry (PCI), how often should security logs be review to comply with the standards?

  A. Daily
  B. Hourly
  C. Weekly
  D. Monthly
  A. Daily

• Question 370:

  Which of the following tests is an IS auditor performing when a sample of programs is selected to determine if the source and object versions are the same?

  A. A substantive test of program library controls
  B. A compliance test of program library controls
  C. A compliance test of the program compiler controls
  D. A substantive test of the program compiler controls
  B. A compliance test of program library controls