EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 151:

  The success of the Chief Information Security Officer is MOST dependent upon:

  A. following the recommendations of consultants and contractors
  B. raising awareness of security issues with end users
  C. favorable audit findings
  D. development of relationships with organization executives
  D. development of relationships with organization executives

• Question 152:

  To get an Information Security project back on schedule, which of the following will provide the MOST help?

  A. Upper management support
  B. More frequent project milestone meetings
  C. Stakeholder support
  D. None
  E. Extend work hours
  A. Upper management support

• Question 153:

  Access Control lists (ACLs), Firewalls, and Intrusion Prevention Systems are examples of________________.

  A. User segmentation controls
  B. Software segmentation controls
  C. Network based security detective controls
  D. Network based security preventative controls
  D. Network based security preventative controls

• Question 154:

  Which regulation or policy governs protection of personally identifiable user data gathered during a cyber investigation?

  A. ITIL
  B. Privacy Act
  C. Sarbanes Oxley
  D. PCI-DSS
  B. Privacy Act

• Question 155:

  A security manager regularly checks work areas after business hours for security violations; such as unsecured files or unattended computers with active sessions.

  This activity BEST demonstrates what part of a security program?

  A. Compliance management
  B. Audit validation
  C. Physical control testing
  D. Security awareness training
  A. Compliance management

• Question 156:

  Scenario: You are the CISO and have just completed your first risk assessment for your organization. You find many risks with no security controls, and some risks with inadequate controls. You assign work to your staff to create or adjust existing security controls to ensure they are adequate for risk mitigation needs. You have identified potential solutions for all of your risks that do not have security controls.

  What is the NEXT step?

  A. Create a risk metrics for all unmitigated risks
  B. Get approval from the board of directors
  C. Verify that the cost of mitigation is less than the risk
  D. Screen potential vendor solutions
  C. Verify that the cost of mitigation is less than the risk

• Question 157:

  The BEST organization to provide a comprehensive, independent and certifiable perspective on established security controls in an environment is _______________.

  A. External Audit
  B. Forensic experts
  C. Internal Audit
  D. Penetration testers
  A. External Audit

• Question 158:

  Scenario: A CISO has several two-factor authentication systems under review and selects the one that is most sufficient and least costly. The implementation project planning is completed and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization's needs. The CISO discovers the scalability issue will only impact a small number of network segments.

  What is the next logical step to ensure the proper application of risk management methodology within the two-factor implementation project?

  A. Decide to accept the risk on behalf of the impacted business units
  B. Create new use cases for operational use of the solution
  C. Report the deficiency to the audit team and create process exceptions
  D. Determine if sufficient mitigating controls can be applied
  D. Determine if sufficient mitigating controls can be applied

• Question 159:

  If a competitor wants to cause damage to your organization, steal critical secrets, or put you out of business, they just have to find a job opening, prepare someone to pass the interview, have that person hired, and they will be in the organization. How would you prevent such type of attacks?

  A. Conduct thorough background checks before you engage them
  B. Hire the people through third-party job agencies who will vet them for you
  C. Investigate their social networking profiles
  D. It is impossible to block these attacks
  A. Conduct thorough background checks before you engage them

• Question 160:

  The FIRST step in establishing a security governance program is to?

  A. Obtain senior level sponsorship
  B. Conduct a workshop for all end users.
  C. Conduct a risk assessment.
  D. Prepare a security budget.
  C. Conduct a risk assessment.

  ---

  Explanation/Reference: