EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 161:

  An organization's firewall technology needs replaced. A specific technology has been selected that is less costly than others and lacking in some important capabilities. The security officer has voiced concerns about sensitive data breaches but the decision is made to purchase.

  What does this selection indicate?

  A. A high threat environment
  B. A low vulnerability environment
  C. A high risk tolerance environment
  D. A low risk tolerance environment
  C. A high risk tolerance environment

• Question 162:

  Which of the following represents the MOST negative impact resulting from an ineffective security governance program?

  A. Improper use of information resources
  B. Reduction of budget
  C. Decreased security awareness
  D. Fines for regulatory non-compliance
  D. Fines for regulatory non-compliance

• Question 163:

  Which of the following defines the boundaries and scope of a risk assessment?

  A. The risk assessment schedule
  B. The risk assessment framework
  C. The risk assessment charter
  D. The assessment context
  C. The risk assessment charter

  ---

  Explanation/Reference:

  The risk assessment charter is a document that defines the boundaries and scope of a risk assessment. It outlines the objectives, scope, methodology, roles, and responsibilities related to the risk assessment process. It provides a clear framework for conducting the assessment and helps ensure that all relevant aspects are considered within the defined boundaries.

• Question 164:

  You are the CISO for an investment banking firm. The firm is using artificial intelligence (AI) to assist in approving clients for loans. Which control is MOST important to protect AI products?

  A. Hash datasets
  B. Sanitize datasets
  C. Delete datasets
  D. Encrypt datasets
  B. Sanitize datasets

  ---

  Explanation/Reference:

• Question 165:

  A method to transfer risk is to______________.

  A. Implement redundancy
  B. Move operations to another region
  C. Align to business operations
  D. Purchase breach insurance
  D. Purchase breach insurance

• Question 166:

  The primary purpose of a risk register is to:

  A. Maintain a log of discovered risks
  B. Track individual risk assessments
  C. Develop plans for mitigating identified risks
  D. Coordinate the timing of scheduled risk assessments
  A. Maintain a log of discovered risks

  ---

  Explanation/Reference:

  Reference: https://sitemate.com/us/resources/articles/safety/purpose-of-a-risk-register/

• Question 167:

  Which of the following best describes revenue?

  A. Non-operating financial liabilities minus expenses
  B. The true profit-making potential of an organization
  C. The sum value of all assets and cash flow into the business
  D. The economic benefit derived by operating a business
  D. The economic benefit derived by operating a business

  ---

  Explanation/Reference:

  Reference: https://www.investopedia.com/terms/r/revenue.asp

• Question 168:

  Scenario: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified.

  Which of the following is the FIRST action the CISO will perform after receiving the audit report?

  A. Inform peer executives of the audit results
  B. Validate gaps and accepts or dispute the audit findings
  C. Create remediation plans to address program gaps
  D. Determine if security policies and procedures are adequate
  B. Validate gaps and accepts or dispute the audit findings

• Question 169:

  What are the three stages of an identity and access management system?

  A. Authentication, Authorize, Validation
  B. Provision, Administration, Enforcement
  C. Administration, Validation, Protect
  D. Provision, Administration, Authentication
  A. Authentication, Authorize, Validation

  ---

  Explanation/Reference:

  Reference: https://digitalguardian.com/blog/what-identity-and-access-management-iam

• Question 170:

  A severe security threat has been detected on your corporate network. As CISO you quickly assemble key members of the Information Technology team and business operations to determine a modification to security controls in response to the threat.

  This is an example of:

  A. Change management
  B. Thought leadership
  C. Business continuity planning
  D. Security Incident Response
  D. Security Incident Response