EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 31:

  Scenario: Your company has many encrypted telecommunications links for their world-wide operations. Physically distributing symmetric keys to all locations has proven to be administratively burdensome, but symmetric keys are preferred to other alternatives.

  How can you reduce the administrative burden of distributing symmetric keys for your employer?

  A. Use asymmetric encryption for the automated distribution of the symmetric key
  B. Use a self-generated key on both ends to eliminate the need for distribution
  C. Use certificate authority to distribute private keys
  D. Symmetrically encrypt the key and then use asymmetric encryption to unencrypt it
  A. Use asymmetric encryption for the automated distribution of the symmetric key

• Question 32:

  The Annualized Loss Expectancy (Before) minus Annualized Loss Expectancy (After) minus Annual Safeguard Cost is the formula for determining:

  A. Safeguard Value
  B. Cost Benefit Analysis
  C. Single Loss Expectancy
  D. Life Cycle Loss Expectancy
  B. Cost Benefit Analysis

• Question 33:

  Which of the following would negatively impact a log analysis of a multinational organization?

  A. Centralized log management
  B. Encrypted log files in transit
  C. Each node set to local time
  D. Log aggregation agent each node
  D. Log aggregation agent each node

• Question 34:

  Which of the following methods are used to define contractual obligations that force a vendor to meet customer expectations?

  A. Terms and Conditions
  B. Service Level Agreements (SLA)
  C. Statement of Work
  D. Key Performance Indicators (KPI)
  B. Service Level Agreements (SLA)

• Question 35:

  Which of the following defines the boundaries and scope of a risk assessment?

  A. The risk assessment schedule
  B. The risk assessment framework
  C. The risk assessment charter
  D. The assessment context
  B. The risk assessment framework

• Question 36:

  Which of the following conditions would be the MOST probable reason for a security project to be rejected by the executive board of an organization?

  A. The Net Present Value (NPV) of the project is positive
  B. The NPV of the project is negative
  C. The Return on Investment (ROI) is larger than 10 months
  D. The ROI is lower than 10 months
  B. The NPV of the project is negative

• Question 37:

  After a risk assessment is performed, a particular risk is considered to have the potential of costing the organization 1.2 Million USD. This is an example of

  A. Risk Tolerance
  B. Qualitative risk analysis
  C. Risk Appetite
  D. Quantitative risk analysis
  D. Quantitative risk analysis

• Question 38:

  Step-by-step procedures to regain normalcy in the event of a major earthquake is PRIMARILY covered by which of the following plans?

  A. Incident response plan
  B. Business Continuity plan
  C. Disaster recovery plan
  D. Damage control plan
  C. Disaster recovery plan

• Question 39:

  Which of the following has the GREATEST impact on the implementation of an information security governance model?

  A. Organizational budget
  B. Distance between physical locations
  C. Number of employees
  D. Complexity of organizational structure
  D. Complexity of organizational structure

• Question 40:

  What is the SECOND step to creating a risk management methodology according to the National Institute of Standards and Technology (NIST) SP 800-30 standard?

  A. Determine appetite
  B. Evaluate risk avoidance criteria
  C. Perform a risk assessment
  D. Mitigate risk
  D. Mitigate risk