EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 211:

  When selecting a security solution with reoccurring maintenance costs after the first year

  A. Implement the solution and ask for the increased operating cost budget when it is time
  B. Communicate future operating costs to the CIO/CFO and seek commitment from them to ensure the new solution's continued use
  C. Defer selection until the market improves and cash flow is positive
  D. The CISO should cut other essential programs to ensure the new solution's continued use
  B. Communicate future operating costs to the CIO/CFO and seek commitment from them to ensure the new solution's continued use

• Question 212:

  Which of the following most commonly falls within the scope of an information security governance steering committee?

  A. Vetting information security policies
  B. Approving access to critical financial systems
  C. Interviewing candidates for information security specialist positions
  D. Developing content for security awareness programs
  A. Vetting information security policies

• Question 213:

  Which of the following strategies provides the BEST response to a ransomware attack?

  A. Real-time off-site replication
  B. Daily incremental backup
  C. Daily full backup
  D. Daily differential backup
  A. Real-time off-site replication

  ---

  Explanation/Reference:

• Question 214:

  The primary responsibility for assigning entitlements to a network share lies with which role?

  A. CISO
  B. Data owner
  C. Chief Information Officer (CIO)
  D. Security system administrator
  B. Data owner

  ---

  Explanation/Reference:

  Reference: https://resources.infosecinstitute.com/certification/data-and-system-ownership/

• Question 215:

  What are the three hierarchically related aspects of strategic planning and in which order should they be done?

  A. 1) Information technology strategic planning, 2) Enterprise strategic planning, 3) Cybersecurity or information security strategic planning
  B. 1) Cybersecurity or information security strategic planning, 2) Enterprise strategic planning, 3) Information technology strategic planning
  C. 1) Enterprise strategic planning, 2) Information technology strategic planning, 3) Cybersecurity or information security strategic planning
  D. 1) Enterprise strategic planning, 2) Cybersecurity or information security strategic planning, 3) Information technology strategic planning
  C. 1) Enterprise strategic planning, 2) Information technology strategic planning, 3) Cybersecurity or information security strategic planning

  ---

  Explanation/Reference:

• Question 216:

  Which of the following reports should you as an IT auditor use to check on compliance with a Service Level Agreement (SLA) requirement for uptime?

  A. Systems logs
  B. Hardware error reports
  C. Availability reports
  D. Utilization reports
  C. Availability reports

• Question 217:

  When measuring the effectiveness of an Information Security Management System which one of the following would be MOST LIKELY used as a metric framework?

  A. ISO 27001
  B. ISO 27004
  C. PRINCE2
  D. ITILv3
  B. ISO 27004

• Question 218:

  When obtaining new products and services, why is it essential to collaborate with lawyers, IT security professionals, privacy professionals, security engineers, suppliers, and others?

  A. This makes sure the files you exchange aren't unnecessarily flagged by the Data Loss Prevention (DLP) system
  B. Contracting rules typically require you to have conversations with two or more groups
  C. Discussing decisions with a very large group of people always provides a better outcome
  D. It helps to avoid regulatory or internal compliance issues
  D. It helps to avoid regulatory or internal compliance issues

  ---

  Explanation/Reference:

  Reference: https://www.eccouncil.org/wp-content/uploads/2016/07/NICE-2.0-and-EC-Council-Cert-Mapping.pdf

• Question 219:

  Which of the following represents the BEST method of ensuring security program alignment to business needs?

  A. Ensure the organization has strong executive-level security representation through clear sponsorship or the creation of a CISO role
  B. Create a comprehensive security awareness program and provide success metrics to business units
  C. Create security consortiums, such as strategic security planning groups, that include business unit participation
  D. Ensure security implementations include business unit testing and functional validation prior to production rollout
  C. Create security consortiums, such as strategic security planning groups, that include business unit participation

• Question 220:

  The main purpose of the SOC is:

  A. An organization which provides Tier 1 support for technology issues and provides escalation when needed
  B. A distributed organization which provides intelligence to governments and private sectors on cyber-criminal activities
  C. The coordination of personnel, processes and technology to identify information security events and provide timely response and remediation
  D. A device which consolidates event logs and provides real-time analysis of security alerts generated by applications and network hardware
  C. The coordination of personnel, processes and technology to identify information security events and provide timely response and remediation

  ---

  Explanation/Reference:

  Reference: https://www.eccouncil.org/what-is-soc/