EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 181:

  You currently cannot provide for 24/7 coverage of your security monitoring and incident response duties and your company is resistant to the idea of adding more full-time employees to the payroll.

  Which combination of solutions would help to provide the coverage needed without the addition of more dedicated staff?

  A. Employ an assumption of breach protocol and defend only essential information resources.
  B. Deploy a SEIM solution and have current staff review incidents first in the morning
  C. Configure your syslog to send SMS messages to current staff when target events are triggered.
  D. Contract with a managed security provider and have current staff on recall for incident response
  D. Contract with a managed security provider and have current staff on recall for incident response

• Question 182:

  What role should the CISO play in properly scoping a PCI environment?

  A. Complete the self-assessment questionnaire and work with an Approved Scanning Vendor (ASV) to determine scope
  B. Work with a Qualified Security Assessor (QSA) to determine the scope of the PCI environment
  C. Validate the business units' suggestions as to what should be included in the scoping process
  D. Ensure internal scope validation is completed and that an assessment has been done to discover all credit card data
  B. Work with a Qualified Security Assessor (QSA) to determine the scope of the PCI environment

  ---

  Explanation/Reference:

  Work with a Qualified Security Assessor (QSA) to determine the scope of the PCI environment

• Question 183:

  When would it be more desirable to develop a set of decentralized security policies and procedures within an enterprise environment?

  A. When there is a variety of technologies deployed in the infrastructure.
  B. When it results in an overall lower cost of operating the security program.
  C. When there is a need to develop a more unified incident response capability.
  D. When the enterprise is made up of many business units with diverse business activities, risks profiles and regulatory requirements.
  D. When the enterprise is made up of many business units with diverse business activities, risks profiles and regulatory requirements.

• Question 184:

  Your company has limited resources to spend on security initiatives. The Chief Financial Officer asks you to prioritize the protection of information resources based on their value to the company. It is essential that you be able to communicate in language that your fellow executives will understand.

  You should:

  A. Create a detailed technical executive summary
  B. Create timelines for mitigation
  C. Calculate annual loss expectancy
  D. Develop a cost-benefit analysis
  D. Develop a cost-benefit analysis

• Question 185:

  Which of the following provides an independent assessment of a vendor's internal security controls and overall posture?

  A. ISO27000 accreditation
  B. Alignment with business goals
  C. PCI attestation of compliance
  D. Financial statements
  A. ISO27000 accreditation

• Question 186:

  Scenario: Critical servers show signs of erratic behavior within your organization's intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team.

  What phase of the response provides measures to reduce the likelihood of an incident from recurring?

  A. Recovery
  B. Follow-up
  C. Response
  D. Investigation
  B. Follow-up

• Question 187:

  A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization.

  Which of the following principles does this best demonstrate?

  A. Proper budget management
  B. Effective use of existing technologies
  C. Alignment with the business
  D. Leveraging existing implementations
  C. Alignment with the business

• Question 188:

  What are the primary reasons for the development of a business case for a security project?

  A. To forecast usage and cost per software licensing
  B. To understand the attack vectors and attack sources
  C. To communicate risk and forecast resource needs
  D. To estimate risk and negate liability to the company
  C. To communicate risk and forecast resource needs

• Question 189:

  Michael starts a new job and discovers that he has unnecessary access to a variety of systems. Which of the following best describes the problem he has encountered?

  A. Rights collision
  B. Excessive privileges
  C. Privilege creep
  D. Least privileges
  B. Excessive privileges

• Question 190:

  When a critical vulnerability has been discovered on production systems and needs to be fixed immediately, what is the BEST approach for a CISO to mitigate the vulnerability under tight budget constraints?

  A. Schedule an emergency meeting and request the finding to fix the issue
  B. Take the system off line until budget is available
  C. Transfer financial resources from other critical programs
  D. Deploy countermeasures and compensation controls until the budget is available
  D. Deploy countermeasures and compensation controls until the budget is available