EC-COUNCIL EC-COUNCIL Certifications 712-50 Questions & Answers

• Question 191:

  When should IT security project management be outsourced?

  A. On projects not forecasted in the yearly budget

  B. When organizational resources are limited

  C. When the benefits of outsourcing outweigh the inherent risks of outsourcing

  D. On new, enterprise-wide security initiatives

  Correct Answer: C

• Question 192:

  Assigning the role and responsibility of Information Assurance to a dedicated and independent security group is an example of:

  A. Detective Controls

  B. Proactive Controls

  C. Organizational Controls

  D. Preemptive Controls

  Correct Answer: C

• Question 193:

  Which is the BEST solution to monitor, measure, and report changes to critical data in a system?

  A. SNMP traps

  B. Syslog

  C. File integrity monitoring

  D. Application logs

  Correct Answer: C

• Question 194:

  Which of the following represents the BEST reason for an organization to use the Control Objectives for Information and Related Technology (COBIT) as an Information Technology (IT) framework?

  A. Information Security (IS) procedures often require augmentation with other standards

  B. Implementation of it eases an organization's auditing and compliance burden

  C. It provides for a consistent and repeatable staffing model for technology organizations

  D. It allows executives to more effectively monitor IT implementation costs

  Correct Answer: B

• Question 195:

  Which of the following is considered to be an IT governance framework and a supporting toolset that allows for managers to bridge the gap between control requirements, technical issues, and business risks?

  A. Information technology Infrastructure Library (ITIL)

  B. Committee of Sponsoring Organizations (COSO)

  C. Control Objective for Information Technology (COBIT)

  D. Payment Card Industry (PCI)

  Correct Answer: C

• Question 196:

  Which of the following is the MOST effective way to measure the effectiveness of security controls on a perimeter network?

  A. Perform a vulnerability scan of the network

  B. Internal Firewall ruleset reviews

  C. Implement network intrusion prevention systems

  D. External penetration testing by a qualified third party

  Correct Answer: D

• Question 197:

  The CIO of an organization has decided to assign the responsibility of internal IT audit to the IT team. This is considering a bad practice MAINLY because_______________.

  A. The IT team is not familiar in IT audit practices

  B. This represents a bad implementation of the Least Privilege principle

  C. The IT team is not certified to perform audits

  D. This represents a conflict of interest

  Correct Answer: D

• Question 198:

  Which of the following activities is the MAIN purpose of the risk assessment process?

  A. Creating an inventory of information assets

  B. Calculating the risks to which assets are exposed in their current setting

  C. Classifying and organizing information assets into meaningful groups

  D. Assigning value to each information asset

  Correct Answer: B

• Question 199:

  You are the Chief Information Security Officer of a large, multinational bank and you suspect there is a flaw in a two factor authentication token management process.

  Which of the following represents your BEST course of action?

  A. Determine program ownership to implement compensating controls

  B. Send a report to executive peers and business unit owners detailing your suspicions

  C. Validate that security awareness program content includes information about the potential vulnerability

  D. Conduct a throughout risk assessment against the current implementation to determine system functions

  Correct Answer: D

• Question 200:

  The effectiveness of social engineering penetration testing using phishing can be used as a Key Performance Indicator (KPI) for the effectiveness of an organization's

  A. Risk Management Program

  B. Anti-Spam controls

  C. Identity and Access Management Program

  D. Security Awareness Program

  Correct Answer: D