EC-COUNCIL 512-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 512-50 Online Questions & Answers

• Question 81:

  A security officer wants to implement a vulnerability scanning program. The officer is uncertain of the state of vulnerability resiliency within the organization's large IT infrastructure. What would be the BEST approach to minimize scan data output while retaining a realistic view of system vulnerability?

  A. Scan a representative sample of systems
  B. Perform the scans only during off-business hours
  C. Decrease the vulnerabilities within the scan tool settings
  D. Filter the scan output so only pertinent data is analyzed
  A. Scan a representative sample of systems

• Question 82:

  As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building. Below your office window you notice a door that is normally propped open during the day for groups of people to take breaks outside. Upon looking closer you see there is no badge reader. What should you do?

  A. Nothing, this falls outside your area of influence.
  B. Close and chain the door shut and send a company-wide memo banning the practice.
  C. Have a risk assessment performed.
  D. Post a guard at the door to maintain physical security
  C. Have a risk assessment performed.

• Question 83:

  Which of the following set of processes is considered to be one of the cornerstone cycles of the International Organization for Standardization (ISO) 27001 standard?

  A. Plan-Check-Do-Act
  B. Plan-Do-Check-Act
  C. Plan-Select-Implement-Evaluate
  D. SCORE (Security Consensus Operational Readiness Evaluation)
  B. Plan-Do-Check-Act

• Question 84:

  Which of the following can the company implement in order to avoid this type of security issue in the future?

  A. Network based intrusion detection systems
  B. A security training program for developers
  C. A risk management process
  D. A audit management process
  B. A security training program for developers

• Question 85:

  Where does bottom-up financial planning primarily gain information for creating budgets?

  A. By adding all capital and operational costs from the prior budgetary cycle, and determining potential financial shortages
  B. By reviewing last year's program-level costs and adding a percentage of expected additional portfolio costs
  C. By adding the cost of all known individual tasks and projects that are planned for the next budgetary cycle
  D. By adding all planned operational expenses per quarter then summarizing them in a budget request
  D. By adding all planned operational expenses per quarter then summarizing them in a budget request

• Question 86:

  Which of the following is the MOST important component of any change management process?

  A. Scheduling
  B. Back-out procedures
  C. Outage planning
  D. Management approval
  D. Management approval

• Question 87:

  When considering using a vendor to help support your security devices remotely, what is the BEST choice for allowing access?

  A. Vendors uses their own laptop and logins with same admin credentials your security team uses
  B. Vendor uses a company supplied laptop and logins using two factor authentication with same admin credentials your security team uses
  C. Vendor uses a company supplied laptop and logins using two factor authentication with their own unique credentials
  D. Vendor uses their own laptop and logins using two factor authentication with their own unique credentials
  C. Vendor uses a company supplied laptop and logins using two factor authentication with their own unique credentials

• Question 88:

  What is the term describing the act of inspecting all real-time Internet traffic (i.e., packets) traversing a major Internet backbone without introducing any apparent latency?

  A. Traffic Analysis
  B. Deep-Packet inspection
  C. Packet sampling
  D. Heuristic analysis
  B. Deep-Packet inspection

• Question 89:

  The patching and monitoring of systems on a consistent schedule is required by?

  A. Local privacy laws
  B. Industry best practices
  C. Risk Management frameworks
  D. Audit best practices
  C. Risk Management frameworks

• Question 90:

  Which of the following best summarizes the primary goal of a security program?

  A. Provide security reporting to all levels of an organization
  B. Create effective security awareness to employees
  C. Manage risk within the organization
  D. Assure regulatory compliance
  C. Manage risk within the organization