EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 91:

  Which of the following is the MAIN security concern for public cloud computing?

  A. Unable to control physical access to the servers
  B. Unable to patch systems as needed
  C. Unable to run anti-virus scans
  D. Unable to track log on activity
  A. Unable to control physical access to the servers

• Question 92:

  Which of the following are not stakeholders of IT security projects?

  A. Board of directors
  B. Help Desk
  C. Third party vendors
  D. CISO
  C. Third party vendors

• Question 93:

  When entering into a third party vendor agreement for security services, at what point in the process is it BEST to understand and validate the security posture and compliance level of the vendor?

  A. Prior to signing the agreement and before any security services are being performed
  B. Once the agreement has been signed and the security vendor states that they will need access to the network
  C. Once the vendor is on premise and before they perform security services D. At the time the security services are being performed and the vendor needs access to the network
  A. Prior to signing the agreement and before any security services are being performed

• Question 94:

  Which of the following is MOST beneficial in determining an appropriate balance between uncontrolled innovation and excessive caution in an organization?

  A. Collaborate security projects
  B. Review project charters
  C. Define the risk appetite
  D. Determine budget constraints
  C. Define the risk appetite

• Question 95:

  In accordance with best practices and international standards, how often is security awareness training provided to employees of an organization?

  A. Every 18 months
  B. Every 12 months
  C. High risk environments 6 months, low-risk environments 12 months
  D. Every 6 months
  B. Every 12 months

• Question 96:

  A key cybersecurity feature of a Personal Identification Verification (PIV) Card is:

  A. Inability to export the private certificate/key
  B. It can double as physical identification at the DMV
  C. It has the user's photograph to help ID them
  D. It can be used as a secure flash drive
  A. Inability to export the private certificate/key

  ---

  Explanation/Reference:

• Question 97:

  Scenario: As you begin to develop the program for your organization, you assess the corporate culture and determine that there is a pervasive opinion that the security program only slows things down and limits the performance of the "real workers."

  What must you do first in order to shift the prevailing opinion and reshape corporate culture to understand the value of information security to the organization?

  A. Cite corporate policy and insist on compliance with audit findings
  B. Draw from your experience and recount stories of how other companies have been compromised
  C. Understand the business and focus your efforts on enabling operations securely
  D. Cite compliance with laws, statutes, and regulations ?explaining the financial implications for the company for non-compliance
  C. Understand the business and focus your efforts on enabling operations securely

• Question 98:

  Scenario: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified. The CISO has implemented remediation activities.

  Which of the following is the MOST logical next step?

  A. Validate the effectiveness of applied controls
  B. Report the audit findings and remediation status to business stake holders
  C. Validate security program resource requirements
  D. Review security procedures to determine if they need modified according to findings
  A. Validate the effectiveness of applied controls

• Question 99:

  If the result of an NPV is positive, then the project should be selected. The net present value shows the present value of the project, based on the decisions taken for its selection. What is the net present value equal to?

  A. Net profit per capita income
  B. Total investment Discounted cash
  C. Average profit Annual investment
  D. Initial investment Future value
  B. Total investment Discounted cash

  ---

  Explanation/Reference:

  The net present value (NPV) is equal to option B: Total investment - Discounted cash.

• Question 100:

  What is the MAIN reason for conflicts between Information Technology and Information Security programs?

  A. The effective implementation of security controls can be viewed as an inhibitor to rapid Information technology implementations.
  B. Technology Governance is focused on process risks whereas Security Governance is focused on business risk.
  C. Technology governance defines technology policies and standards while security governance does not.
  D. Security governance defines technology best practices and Information Technology governance does not.
  A. The effective implementation of security controls can be viewed as an inhibitor to rapid Information technology implementations.