EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 101:

  You work as a project manager for TYU project. You are planning for risk mitigation. You need to quickly identify high-level risks that will need a more in-depth analysis.

  Which one of the following approaches would you use?

  A. Risk mitigation
  B. Estimate activity duration
  C. Quantitative analysis
  D. Qualitative analysis
  D. Qualitative analysis

• Question 102:

  A recommended method to document the respective roles of groups and individuals for a given process is to:

  A. Develop a detailed internal organization chart
  B. Develop an isolinear response matrix with cost benefit analysis projections
  C. Develop a Responsible, Accountable, Consulted, Informed (RACI) chart
  D. Develop a telephone call tree for emergency response
  C. Develop a Responsible, Accountable, Consulted, Informed (RACI) chart

• Question 103:

  Network Forensics is the prerequisite for any successful legal action after attacks on your Enterprise Network.

  Which is the single most important factor to introducing digital evidence into a court of law?

  A. Expert forensics witness
  B. Fully trained network forensic expects to analyze all data right after the attack
  C. Uninterrupted Chain of Custody
  D. Comprehensive Log-Files from all servers and network devices affected during the attack
  C. Uninterrupted Chain of Custody

• Question 104:

  When creating a vulnerability scan schedule, who is the MOST critical person to communicate with in order to ensure impact of the scan is minimized?

  A. The asset manager
  B. The project manager
  C. The asset owner
  D. The data custodian
  C. The asset owner

• Question 105:

  Which of the following terms is used to describe countermeasures implemented to minimize risks to physical property, information, and computing systems?

  A. Security frameworks
  B. Security policies
  C. Security awareness
  D. Security controls
  D. Security controls

  ---

  Explanation/Reference:

  Reference: https://www.ibm.com/cloud/learn/security-controls

• Question 106:

  The Board of Directors of a publicly-traded company is concerned about the security implications of a strategic project that will migrate 50% of the organization's information technology assets to the cloud. They have requested a briefing on the project plan and a progress report of the security stream of the project. As the CISO, you have been tasked with preparing the report for the Chief Executive Officer to present.

  Using the Earned Value Management (EVM), what does a Cost Variance (CV) of -1,200 mean?

  A. The project is over budget
  B. The project budget has reserves
  C. The project cost is in alignment with the budget
  D. The project is under budget
  A. The project is over budget

  ---

  Explanation/Reference:

  Reference: https://www.pmi.org/learning/library/earned-value-management-systems-analysis-8026#:~:text=The%20cost%20variance%20is%20defined,the%20project%20is%20on%20budget

• Question 107:

  What is a difference from the list below between quantitative and qualitative Risk Assessment?

  A. Quantitative risk assessments result in an exact number (in monetary terms)
  B. Quantitative risk assessments result in a quantitative assessment (high, medium, low, red, yellow, green)
  C. Qualitative risk assessments map to business objectives
  D. Qualitative risk assessments result in a quantitative assessment (high, medium, low, red, yellow, green)
  A. Quantitative risk assessments result in an exact number (in monetary terms)

• Question 108:

  Scenario: Critical servers show signs of erratic behavior within your organization's intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team.

  In what phase of the response will the team extract information from the affected systems without altering original data?

  A. Follow-up
  B. Recovery
  C. Response
  D. Investigation
  D. Investigation

• Question 109:

  What is the primary difference between Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS)?

  A. IPS identify potentially malicious traffic based on signature or behaviour and IDS does not
  B. An IPS examine network traffic flows to detect and actively stop exploits and attacks
  C. IDS are typically deployed behind the firewall and IPS are deployed in front of the firewall
  D. Only IDS is susceptible to false positives
  B. An IPS examine network traffic flows to detect and actively stop exploits and attacks

  ---

  Explanation/Reference:

• Question 110:

  Information Security is often considered an excessive, after-the-fact cost when a project or initiative is completed.

  What can be done to ensure that security is addressed cost effectively?

  A. Launch an internal awareness campaign
  B. Installation of new firewalls and intrusion detection systems
  C. Integrate security requirements into project inception
  D. User awareness training for all employees
  C. Integrate security requirements into project inception