EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 201:

  Which of the following is considered the MOST effective tool against social engineering?

  A. Effective Security Vulnerability Management Program
  B. Anti-malware tools
  C. Effective Security awareness program
  D. Anti-phishing tools
  C. Effective Security awareness program

• Question 202:

  Which of the following best describes a portfolio?

  A. The portfolio is used to manage and track individual projects
  B. The portfolio is used to manage incidents and events
  C. A portfolio typically consists of several programs
  D. A portfolio delivers one specific service or program to the business
  C. A portfolio typically consists of several programs

• Question 203:

  Scenario: A CISO has several two-factor authentication systems under review and selects the one that is most sufficient and least costly. The implementation project planning is completed, and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization's needs.

  What is the MOST logical course of action the CISO should take?

  A. Cancel the project if the business need was based on internal requirements versus regulatory compliance requirements
  B. Review the original solution set to determine if another system would fit the organization's risk appetite and budget regulatory compliance requirements
  C. Continue with the project until the scalability issue is validated by others, such as an auditor or third party assessor.
  D. Continue with the implementation and submit change requests to the vendor in order to ensure required functionality will be proved when needed
  B. Review the original solution set to determine if another system would fit the organization's risk appetite and budget regulatory compliance requirements

• Question 204:

  When you develop your audit remediation plan what is the MOST important criteria?

  A. To validate the remediation process with the auditor.
  B. To validate that the cost of the remediation is less than risk of the finding.
  C. To remediate half of the findings before the next audit.
  D. To remediate all of the findings before the next audit.
  A. To validate the remediation process with the auditor.

  ---

  Explanation/Reference:

• Question 205:

  In MOST organizations which group periodically reviews network intrusion detection system logs for all systems as part of their daily tasks?

  A. Internal Audit
  B. Information Security
  C. Compliance
  D. Database Administration
  B. Information Security

• Question 206:

  An employee successfully avoids becoming a victim of a sophisticated spear phishing attack due to knowledge gained through the corporate information security awareness program.

  What type of control has been effectively utilized?

  A. Technical Control
  B. Management Control
  C. Operational Control
  D. Training Control
  D. Training Control

  ---

  Explanation/Reference:

• Question 207:

  Scenario: The new CISO was informed of all the Information Security projects that the section has in progress. Two projects are over a year behind schedule and way over budget. Using the best business practices for project management, you determine that the project correctly aligns with the organization goals.

  What should be verified next?

  A. Scope
  B. Constraints
  C. Resources
  D. Budget
  A. Scope

• Question 208:

  What is the primary reason for performing a return on investment analysis?

  A. To determine the current present value of a project
  B. To determine the annual rate of loss
  C. To decide between multiple vendors
  D. To decide is the solution costs less than the risk it is mitigating
  D. To decide is the solution costs less than the risk it is mitigating

• Question 209:

  A newly appointed security officer finds data leakage software licenses that had never been used. The officer decides to implement a project to ensure it gets installed, but the project gets a great deal of resistance across the organization. Which of the following represents the MOST likely reason for this situation?

  A. The project was initiated without an effort to get support from impacted business units in the organization
  B. The security officer should allow time for the organization to get accustomed to her presence before initiating security projects
  C. The software is out of date and does not provide for a scalable solution across the enterprise
  D. The software license expiration is probably out of synchronization with other software licenses
  A. The project was initiated without an effort to get support from impacted business units in the organization

• Question 210:

  During the 3rd quarter of a budget cycle, the CISO noticed she spent more than was originally planned in her annual budget. What is the condition of her current budgetary posture?

  A. The budget is in a temporary state of imbalance
  B. The budget is operating at a deficit
  C. She can realign the budget through moderate capital expense (CAPEX) allocation
  D. She has a surplus of operational expenses (OPEX)
  B. The budget is operating at a deficit

  ---

  Explanation/Reference:

  The budget is operating at a deficit: This option suggests that the expenses have exceeded the allocated budget, resulting in a shortfall. It indicates that the CISO has spent more than what was planned, leading to a deficit in the budget.