EC-COUNCIL EC-COUNCIL Certifications 712-50 Questions & Answers

• Question 171:

  Which of the following best describes the purpose of the International Organization for Standardization (ISO) 27002 standard?

  A. To provide effective security management practice and to provide confidence in interorganizational dealings

  B. To established guidelines and general principles for initiating, implementing, maintaining and improving information security management within an organization

  C. To give information security management recommendations to those who are responsible for initiating, implementing, or maintaining security in their organization.

  D. To provide a common basis for developing organizational security standards

  Correct Answer: B

• Question 172:

  Which of the following organizations is typically in charge of validating the implementation and effectiveness of security controls?

  A. Security Operations

  B. Internal/External Audit

  C. Risk Management

  D. Security Administrators

  Correct Answer: B

• Question 173:

  An information security department is required to remediate system vulnerabilities when they are discovered. Please select the three primary remediation methods that can be used on an affected system.

  A. Install software patch, configuration adjustment, software removal

  B. Install software patch, operate system, maintain system

  C. Discover software, remove affected software, apply software patch

  D. Software removal, install software patch, maintain system

  Correct Answer: A

• Question 174:

  The remediation of a specific audit finding is deemed too expensive and will not be implemented.

  Which of the following is a TRUE statement?

  A. The audit findings is incorrect

  B. The asset is more expensive than the remediation

  C. The asset being protected is less valuable than the remediation costs

  D. The remediation costs are irrelevant; it must be implemented regardless of cost.

  Correct Answer: C

• Question 175:

  Which International Organization for Standardization (ISO) below BEST describes the performance of risk management, and includes a five-stage risk management methodology.

  A. ISO 27005

  B. ISO 27004

  C. ISO 27002

  D. ISO 27001

  Correct Answer: A

• Question 176:

  With respect to the audit management process, management response serves what function?

  A. revealing the "root cause" of the process failure and mitigating for all internal and external units

  B. adding controls to ensure that proper oversight is achieved by management

  C. determining whether or not resources will be allocated to remediate a finding

  D. placing underperforming units on notice for failing to meet standards

  Correct Answer: C

• Question 177:

  At which point should the identity access management team be notified of the termination of an employee?

  A. Immediately so the employee account(s) can be disabled

  B. During the monthly review cycle

  C. At the end of the day once the employee is off site

  D. Before an audit

  Correct Answer: A

• Question 178:

  Providing oversight of a comprehensive information security program for the entire organization is the primary responsibility of which group under the InfoSec governance framework?

  A. Office of the General Counsel

  B. Office of the Auditor

  C. Senior Executives

  D. All employees and users

  Correct Answer: C

• Question 179:

  Creating good security metrics is essential for a CISO. What would be the BEST sources for creating security metrics for baseline defenses coverage?

  A. Servers, routers, switches, modem

  B. Firewall, anti-virus console, IDS, syslog

  C. Firewall, exchange, web server, intrusion detection system (IDS)

  D. IDS, syslog, router, switches

  Correct Answer: B

• Question 180:

  A Chief Information Security Officer received a list of high, medium, and low impact audit findings.

  Which of the following represents the BEST course of action?

  A. If the findings do not impact regulatory compliance, remediate only the high and medium risk findings.

  B. If the findings do not impact regulatory compliance, review current security controls.

  C. If the findings impact regulatory compliance, try to apply remediation that will address the most findings for the least cost.

  D. if the findings impact regulatory compliance, remediate the high findings as quickly as possible.

  Correct Answer: D