EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 41:

  Who in the organization determines access to information?

  A. Legal department
  B. Compliance officer
  C. Data Owner
  D. Information security officer
  C. Data Owner

• Question 42:

  Which is the BEST solution to monitor, measure, and report changes to critical data in a system?

  A. Application logs
  B. File integrity monitoring
  C. SNMP traps
  D. Syslog
  B. File integrity monitoring

• Question 43:

  What are the primary reasons for the development of a business case for a security project?

  A. To estimate risk and negate liability to the company
  B. To understand the attack vectors and attack sources
  C. To communicate risk and forecast resource needs
  D. To forecast usage and cost per software licensing
  C. To communicate risk and forecast resource needs

• Question 44:

  An information security department is required to remediate system vulnerabilities when they are discovered. Please select the three primary remediation methods that can be used on an affected system.

  A. Install software patch, Operate system, Maintain system
  B. Discover software, Remove affected software, Apply software patch
  C. Install software patch, configuration adjustment, Software Removal
  D. Software removal, install software patch, maintain system
  C. Install software patch, configuration adjustment, Software Removal

• Question 45:

  An organization has implemented a change management process for all changes to the IT production environment. This change management process follows best practices and is expected to help stabilize the availability and integrity of the organization's IT environment. Which of the following can be used to measure the effectiveness of this newly implemented process:

  A. Number of change orders rejected
  B. Number and length of planned outages
  C. Number of unplanned outages
  D. Number of change orders processed
  C. Number of unplanned outages

• Question 46:

  Which of the following is the MOST effective method for discovering common technical vulnerabilities within the IT environment?

  A. Reviewing system administrator logs
  B. Auditing configuration templates
  C. Checking vendor product releases
  D. Performing system scans
  D. Performing system scans

• Question 47:

  Which of the following is a benefit of a risk-based approach to audit planning?

  A. Resources are allocated to the areas of the highest concern
  B. Scheduling may be performed months in advance
  C. Budgets are more likely to be met by the IT audit staff
  D. Staff will be exposed to a variety of technologies
  A. Resources are allocated to the areas of the highest concern

• Question 48:

  SCENARIO: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified.

  Which of the following is the FIRST action the CISO will perform after receiving the audit report?

  A. Inform peer executives of the audit results
  B. Validate gaps and accept or dispute the audit findings
  C. Create remediation plans to address program gaps
  D. Determine if security policies and procedures are adequate
  B. Validate gaps and accept or dispute the audit findings

• Question 49:

  Which of the following are not stakeholders of IT security projects?

  A. Board of directors
  B. Third party vendors
  C. CISO
  D. Help Desk
  B. Third party vendors

• Question 50:

  What is the FIRST step in developing the vulnerability management program?

  A. Baseline the Environment
  B. Maintain and Monitor
  C. Organization Vulnerability
  D. Define Policy
  A. Baseline the Environment