EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 11:

  The implementation of anti-malware and anti-phishing controls on centralized email servers is an example of what type of security control?

  A. Technical control
  B. Management control
  C. Procedural control
  D. Organization control
  A. Technical control

• Question 12:

  Risk appetite directly affects what part of a vulnerability management program?

  A. Scope
  B. Schedule
  C. Staff
  D. Scan tools
  A. Scope

• Question 13:

  When an organization claims it is secure because it is PCI-DSS certified, what is a good first question to ask towards assessing the effectiveness of their security program?

  A. How many credit records are stored?
  B. What is the value of the assets at risk?
  C. What is the scope of the certification?
  D. How many servers do you have?
  C. What is the scope of the certification?

• Question 14:

  Which of the following activities results in change requests?

  A. Corrective actions
  B. Defect repair
  C. Preventive actions
  D. Inspection
  C. Preventive actions

• Question 15:

  When dealing with a risk management process, asset classification is important because it will impact the overall:

  A. Threat identification
  B. Risk treatment
  C. Risk monitoring
  D. Risk tolerance
  B. Risk treatment

• Question 16:

  As the CISO, you have been tasked with the execution of the company's key management program. You MUST ensure the integrity of encryption keys at the point of generation. Which principal of encryption key control will ensure no single individual can constitute or re-constitute a key?

  A. Dual Control
  B. Separation of Duties
  C. Split Knowledge
  D. Least Privilege
  C. Split Knowledge

  ---

  Explanation/Reference:

• Question 17:

  What is a Statement of Objectives (SOA)?

  A. A section of a contract that defines tasks to be performed under said contract
  B. An outline of what the military will do during war
  C. A document that outlines specific desired outcomes as part of a request for proposal
  D. Business guidance provided by the CEO
  C. A document that outlines specific desired outcomes as part of a request for proposal

  ---

  Explanation/Reference:

• Question 18:

  What organizational structure combines the functional and project structures to create a hybrid of the two?

  A. Traditional
  B. Composite
  C. Project
  D. Matrix
  D. Matrix

  ---

  Explanation/Reference:

  Reference: https://www.knowledgehut.com/tutorials/project-management/organization-structures

• Question 19:

  Which of the following represents the best method of ensuring business unit alignment with security program requirements?

  A. Create collaborative risk management approaches within the organization
  B. Perform increased audits of security processes and procedures
  C. Provide clear communication of security requirements throughout the organization
  D. Demonstrate executive support with written mandates for security policy adherence
  A. Create collaborative risk management approaches within the organization

• Question 20:

  What key technology can mitigate ransomware threats?

  A. Use immutable data storage
  B. Phishing exercises
  C. Application of multiple end point anti-malware solutions
  D. Blocking use of wireless networks
  A. Use immutable data storage

  ---

  Explanation/Reference:

  Reference: https://cloud.google.com/blog/products/identity-security/5-pillars-of-protection-to-prevent-ransomware-attacks