EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 1:

  Which of the following best describes the purpose of the International Organization for Standardization (ISO) 27002 standard?

  A. To provide effective security management practice and to provide confidence in interorganizational dealings
  B. To established guidelines and general principles for initiating, implementing, maintaining and improving information security management within an organization
  C. To give information security management recommendations to those who are responsible for initiating, implementing, or maintaining security in their organization.
  D. To provide a common basis for developing organizational security standards
  B. To established guidelines and general principles for initiating, implementing, maintaining and improving information security management within an organization

• Question 2:

  Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant, but it is expected to grow to a global customer base of many millions of customers in just a few years.

  Which of the following would be the FIRST step when addressing Information Security formally and consistently in this organization?

  A. Define formal roles and responsibilities for Information Security
  B. Define formal roles and responsibilities for Internal audit functions
  C. Create an executive security steering committee
  D. Contract a third party to perform a security risk assessment
  A. Define formal roles and responsibilities for Information Security

• Question 3:

  What is the BEST reason for having a formal request for proposal process?

  A. Creates a timeline for purchasing and budgeting
  B. Informs suppliers a company is going to make a purchase
  C. Clearly identifies risks and benefits before funding is spent
  D. Allows small companies to compete with larger companies
  B. Informs suppliers a company is going to make a purchase

  ---

  Explanation/Reference:

  Informs suppliers a company is going to make a purchase" .

  informing supplier is the main goal of RFP . while business case where you identify risks

• Question 4:

  A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization. Which of the following principles does this best demonstrate?

  A. Effective use of existing technologies
  B. Create a comprehensive security awareness program and provide success metrics to business units
  C. Proper budget management
  D. Leveraging existing implementations
  D. Leveraging existing implementations

  ---

  Explanation/Reference:

  By conducting an analysis of the IT infrastructure, the CISO aims to leverage existing implementations, meaning they want to maximize the use and effectiveness of the organization's current security solutions. This approach recognizes the value of utilizing the systems and technologies that are already in place rather than completely replacing or discarding them. It allows for cost savings, optimization of resources, and minimizing disruption to the overall IT environment

• Question 5:

  In order for a CISO to have true situational awareness there is a need to deploy technology that can give a real-time view of security events across the enterprise.

  Which of the following tools represents the BEST choice to achieve this awareness?

  A. Intrusion Detection System (IDS), firewall, switch, syslog
  B. Security Incident Event Management (SIEM), IDS, router, syslog
  C. VMware, router, switch, firewall, syslog, vulnerability management system (VMS)
  D. SIEM, IDS, firewall, VMS
  D. SIEM, IDS, firewall, VMS

• Question 6:

  What is the THIRD state of the Tuchman Stages of Group Development?

  A. Norming
  B. Forming
  C. Storming
  D. Performing
  A. Norming

  ---

  Explanation/Reference:

• Question 7:

  Which of the following intellectual Property components is focused on maintaining brand recognition?

  A. Trademark
  B. Research Logs
  C. Copyright
  D. Patent
  A. Trademark

• Question 8:

  The PRIMARY objective for information security program development should be:

  A. Reducing the impact of the risk to the business.
  B. Establishing incident response programs.
  C. Establishing strategic alignment with business continuity requirements.
  D. Identifying and implementing the best security solutions.
  A. Reducing the impact of the risk to the business.

• Question 9:

  Assigning the role and responsibility of Information Assurance to a dedicated and independent security group is an example of: A. Detective Controls

  B. Proactive Controls
  C. Organizational Controls
  D. Preemptive Controls
  C. Organizational Controls

• Question 10:

  Which of the following is a strong post designed to stop a car?

  A. Fence
  B. Bollard
  C. Reinforced rebar
  D. Gate
  B. Bollard