EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 171:

  An organization's Information Security Policy is of MOST importance because_____________.

  A. It defines a process to meet compliance requirements
  B. It establishes a framework to protect confidential information
  C. It communicates management's commitment to protecting information resources
  D. It is formally acknowledged by all employees and vendors
  C. It communicates management's commitment to protecting information resources

• Question 172:

  Using the Transport Layer Security (TLS) protocol enables a client in a network to be:

  A. Provided with a digital signature
  B. Assured of the server's identity
  C. Identified by a network
  D. Registered by the server
  B. Assured of the server's identity

  ---

  Explanation/Reference:

  Reference: https://ukdiss.com/examples/tls.php

• Question 173:

  Which of the following are the triple constraints of project management?

  A. Time, quality, and scope
  B. Cost, quality, and time
  C. Scope, time, and cost
  D. Quality, scope, and cost
  C. Scope, time, and cost

  ---

  Explanation/Reference:

  Reference: https://www.teamgantt.com/blog/triple-constraint-project-management#:~:text=Each%20side%20or%20point%20of,scope%2C%20time%2C%20and%20cost

• Question 174:

  Which of the following is of MOST importance when security leaders of an organization are required to align security to influence the culture of an organization?

  A. Understand the business goals of the organization
  B. Poses a strong technical background
  C. Poses a strong auditing background
  D. Understand all regulations affecting the organization
  A. Understand the business goals of the organization

• Question 175:

  An organization has a stated requirement to block certain traffic on networks. The implementation of controls will disrupt a manufacturing process and cause unacceptable delays, resulting in sever revenue disruptions.

  Which of the following is MOST likely to be responsible for accepting the risk until mitigating controls can be implemented?

  A. Audit and Compliance
  B. The CFO
  C. The CISO
  D. The business owner
  D. The business owner

• Question 176:

  Which of the following is MOST useful when developing a business case for security initiatives?

  A. Cost/benefit analysis
  B. Budget forecasts
  C. Vendor management
  D. Request for proposals
  A. Cost/benefit analysis

• Question 177:

  Which of the following information would MOST likely be reported at the board-level within an organization?

  A. System scanning trends and results as they pertain to insider and external threat sources
  B. The capabilities of a security program in terms of staffing support
  C. Significant risks and security incidents that have been discovered since the last assembly of the membership
  D. The numbers and types of cyberattacks experienced by the organization since the last assembly of the membership
  C. Significant risks and security incidents that have been discovered since the last assembly of the membership

• Question 178:

  Your penetration testing team installs an in-line hardware key logger onto one of your network machines.

  Which of the following is of major concern to the security organization?

  A. In-line hardware keyloggers are undetectable by software
  B. In-line hardware keyloggers are relatively inexpensive
  C. In-line hardware keyloggers don't require physical access
  D. In-line hardware keyloggers don't comply to industry regulations
  A. In-line hardware keyloggers are undetectable by software

• Question 179:

  At which point should the identity access management team be notified of the termination of an employee?

  A. Immediately so the employee account(s) can be disabled
  B. During the monthly review cycle
  C. At the end of the day once the employee is off site
  D. Before an audit
  A. Immediately so the employee account(s) can be disabled

• Question 180:

  If your organization operates under a model of "assumption of breach", you should:

  A. Establish active firewall monitoring protocols
  B. Purchase insurance for your compliance liability
  C. Focus your security efforts on high value assets
  D. Protect all information resource assets equally
  B. Purchase insurance for your compliance liability