EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 111:

  Which of the following is considered the foundation for the Enterprise Information Security Architecture (EISA)?

  A. Data classification
  B. Security regulations
  C. Information security policy
  D. Asset classification
  C. Information security policy

• Question 112:

  Many times a CISO may have to speak to the Board of Directors (BOD) about their cyber security posture.

  What would be the BEST choice of security metrics to present to the BOD?

  A. All vulnerabilities found on servers and desktops
  B. Only critical and high vulnerabilities servers
  C. Only critical and high vulnerabilities on servers and desktops
  D. All vulnerabilities that impact important production servers
  B. Only critical and high vulnerabilities servers

• Question 113:

  The exposure factor of a threat to your organization is defined by?

  A. Annual loss expectancy minus current cost of controls
  B. Percentage of loss experienced due to a realized threat event
  C. Asset value times exposure factor
  D. Annual rate of occurrence
  B. Percentage of loss experienced due to a realized threat event

• Question 114:

  The Annualized Loss Expectancy (Before) minus Annualized Loss Expectancy (After) minus Annual Safeguard Cost is the formula for determining:

  A. Single Loss Expectancy
  B. Life Cycle Loss Expectancy
  C. Safeguard Value D. Cost Benefit Analysis
  D

• Question 115:

  As the Chief Information Security Officer, you are performing an assessment of security posture to understand what your Defense-in-Depth capabilities are. Which network security technology examines network traffic flows to detect and actively stop vulnerability exploits and attacks?

  A. Gigamon
  B. Intrusion Prevention System
  C. Port Security
  D. Anti-virus
  B. Intrusion Prevention System

  ---

  Explanation/Reference:

  Reference: https://searchsecurity.techtarget.com/definition/intrusion-prevention

• Question 116:

  When dealing with Security Incident Response procedures, which of the following steps come FIRST when reacting to an incident?

  A. Eradication
  B. Escalation
  C. Containment
  D. Recovery
  C. Containment

• Question 117:

  The framework that helps to define a minimum standard of protection that business stakeholders must attempt to achieve is referred to as a standard of:

  A. Due Compromise
  B. Due process
  C. Due Care
  D. Due Protection
  C. Due Care

• Question 118:

  Developing effective security controls is a balance between:

  A. Technology and Vendor Management
  B. Operations and Regulations
  C. Risk Management and Operations
  D. Corporate Culture and Job Expectations
  C. Risk Management and Operations

• Question 119:

  In which of the following cases, would an organization be more prone to risk acceptance vs. risk mitigation?

  A. The organization uses exclusively a qualitative process to measure risk
  B. The organization's risk tolerance is low
  C. The organization uses exclusively a quantitative process to measure risk
  D. The organization's risk tolerance is high
  D. The organization's risk tolerance is high

• Question 120:

  Which of the following is used to lure attackers into false environments so they can be monitored, contained, or blocked from reaching critical systems?

  A. Segmentation controls.
  B. Shadow applications.
  C. Deception technology.
  D. Vulnerability management.
  C. Deception technology.

  ---

  Explanation/Reference: