EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 131:

  Which of the following best describes the sensors designed to project and detect a light beam across an area?

  A. Smoke
  B. Thermal
  C. Air-aspirating
  D. Photo electric
  D. Photo electric

  ---

  Explanation/Reference:

  Reference: https://en.wikipedia.org/wiki/Photoelectric_sensor

• Question 132:

  Who should be involved in the development of an internal campaign to address email phishing?

  A. Business unit leaders, CIO, CEO
  B. Business Unite Leaders, CISO, CIO and CEO
  C. All employees
  D. CFO, CEO, CIO
  B. Business Unite Leaders, CISO, CIO and CEO

• Question 133:

  The amount of risk an organization is willing to accept in pursuit of its mission is known as______________.

  A. risk transfer
  B. risk mitigation
  C. risk acceptance
  D. risk tolerance
  D. risk tolerance

• Question 134:

  When is an application security development project complete?

  A. When the application turned over to production.
  B. After one year
  C. When the application reaches the maintenance phase.
  D. When the application is retired.
  D. When the application is retired.

• Question 135:

  Scenario: You are the newly hired Chief Information Security Officer for a company that has not previously had a senior level security practitioner. The company lacks a defined security policy and framework for their Information Security Program. Your new boss, the Chief Financial Officer, has asked you to draft an outline of a security policy and recommend an industry/sector neutral information security control framework for implementation.

  Which of the following industry / sector neutral information security control frameworks should you recommend for implementation?

  A. Payment Card Industry Digital Security Standard (PCI DSS)
  B. National Institute of Standards and Technology (NIST) Special Publication 800-53
  C. International Organization for Standardization ?ISO 27001/2
  D. British Standard 7799 (BS7799)
  C. International Organization for Standardization ?ISO 27001/2

• Question 136:

  A Security Operations Centre (SOC) manager is informed that a database containing highly sensitive corporate strategy information is under attack. Information has been stolen, and the database server was disconnected.

  Who must be informed of this incident?

  A. Internal audit
  B. The data owner
  C. All executive staff
  D. Government regulators
  B. The data owner

• Question 137:

  Risk that remains after risk mitigation is known as_____________.

  A. Accepted risk
  B. Residual risk
  C. Non-tolerated risk
  D. Persistent risk
  B. Residual risk

• Question 138:

  Which of the following best represents a calculation for Annual Loss Expectancy (ALE)?

  A. Value of the asset multiplied by the loss expectancy
  B. Replacement cost multiplied by the single loss expectancy
  C. Single loss expectancy multiplied by the annual rate of occurrence
  D. Total loss expectancy multiplied by the total loss frequency
  C. Single loss expectancy multiplied by the annual rate of occurrence

• Question 139:

  Which of the following is the MOST important component of any change management process?

  A. Outage planning
  B. Scheduling
  C. Approval tracking
  D. Back-out procedures
  C. Approval tracking

  ---

  Explanation/Reference:

  This is key to ensuring that all changes are reviewed, authorized, and documented before implementation. Approval tracking ensures accountability and oversight, which are critical for managing risks associated with changes. It helps in ensuring that changes align with the organization's policies, compliance requirements, and business objectives.

• Question 140:

  According to ISO 27001, of the steps for establishing an Information Security Governance program listed below, which comes first?

  A. Decide how to manage risk
  B. Define Information Security Policy
  C. Identify threats, risks, impacts and vulnerabilities
  D. Define the budget of the Information Security Management System
  B. Define Information Security Policy