EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 121:

  Which of the following statements about Encapsulating Security Payload (ESP) is true?

  A. It is an IPSec protocol
  B. it is a text-based communication protocol
  C. It uses UDP port 22
  D. It uses TCP port 22 as the default port and operates at the application layer
  A. It is an IPSec protocol

• Question 122:

  An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System. Which of the following international standards can BEST assist this organization?

  A. Payment Card Industry Data Security Standards (PCI-DSS)
  B. International Organization for Standardizations 27005 (ISO-27005)
  C. International Organization for Standardizations 27004 (ISO-27004)
  D. Control Objectives for Information Technology (COBIT)
  C. International Organization for Standardizations 27004 (ISO-27004)

  ---

  Explanation/Reference:

• Question 123:

  Which of the following are primary concerns for management with regard to assessing internal control objectives?

  A. Confidentiality, Availability, Integrity
  B. Compliance, Effectiveness, Efficiency
  C. Communication, Reliability, Cost
  D. Confidentiality, Compliance, Cost
  B. Compliance, Effectiveness, Efficiency

• Question 124:

  XYZ is a publicly-traded software development company.

  Who is ultimately accountable to the shareholders in the event of a cybersecurity breach?

  A. Chief Financial Officer (CFO)
  B. Chief Software Architect (CIO)
  C. CISO
  D. Chief Executive Officer (CEO)
  D. Chief Executive Officer (CEO)

  ---

  Explanation/Reference:

• Question 125:

  When working in the Payment Card Industry (PCI), how often should security logs be review to comply with the standards?

  A. Monthly
  B. Hourly
  C. Weekly
  D. Daily
  D. Daily

• Question 126:

  Which represents PROPER separation of duties in the corporate environment?

  A. Information Security and Network teams perform two distinct functions
  B. Information Security and Identity Access Management teams perform two distinct functions
  C. Finance has access to Human Resources data
  D. Developers and Network teams both have admin rights on servers
  B. Information Security and Identity Access Management teams perform two distinct functions

  ---

  Explanation/Reference:

  The correct answer is B. Information Security and Identity Access Management teams perform two distinct functions.

  Proper separation of duties is an important principle in the corporate environment to ensure accountability, prevent conflicts of interest, and reduce the risk of fraud or unauthorized activities. The separation of duties involves dividing responsibilities among different individuals or teams to create checks and balances. By separating the responsibilities of Information Security and Identity Access Management teams, it ensures that there is a clear distinction between the functions related to securing information and managing user access Option A is not a complete separation as both Information Security and Network teams may have overlapping responsibilities and access to sensitive information.

• Question 127:

  Why is it vitally important that senior management endorse a security policy?

  A. So that employees will follow the policy directives.
  B. So that they can be held legally accountable.
  C. So that external bodies will recognize the organizations commitment to security.
  D. So that they will accept ownership for security within the organization.
  A. So that employees will follow the policy directives.

  ---

  Explanation/Reference:

• Question 128:

  Scenario: Critical servers show signs of erratic behavior within your organization's intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team. During initial investigation, the team suspects criminal activity but cannot initially prove or disprove illegal actions.

  What is the MOST critical aspect of the team's activities?

  A. Regular communication of incident status to executives
  B. Preservation of information
  C. Eradication of malware and system restoration
  D. Determination of the attack source
  B. Preservation of information

• Question 129:

  An information security department is required to remediate system vulnerabilities when they are discovered. Please select the three primary remediation methods that can be used on an affected system.

  A. Install software patch, configuration adjustment, software removal
  B. Install software patch, operate system, maintain system
  C. Discover software, remove affected software, apply software patch
  D. Software removal, install software patch, maintain system
  A. Install software patch, configuration adjustment, software removal

• Question 130:

  The process for management approval of the security certification process which states the risks and mitigation of such risks of a given IT system is called___________________.

  A. Security certification
  B. Security system analysis
  C. Alignment with business practices and goals
  D. Security accreditation
  D. Security accreditation