EC-COUNCIL EC-COUNCIL Certifications 712-50 Questions & Answers

• Question 221:

  What is the main purpose of the Incident Response Team?

  A. Communicate details of information security incidents

  B. Create effective policies detailing program activities

  C. Ensure efficient recovery and reinstate repaired systems

  D. Provide effective employee awareness programs

  Correct Answer: C

• Question 222:

  During the course of a risk analysis your IT auditor identified threats and potential impacts. Next, your IT auditor should:

  A. Identify and assess the risk assessment process used by management.

  B. Identify and evaluate existing controls.

  C. Identify information assets and the underlying systems.

  D. Disclose the threats and impacts to management.

  Correct Answer: B

• Question 223:

  The success of the Chief Information Security Officer is MOST dependent upon:

  A. following the recommendations of consultants and contractors

  B. raising awareness of security issues with end users

  C. favorable audit findings

  D. development of relationships with organization executives

  Correct Answer: D

• Question 224:

  What is the BEST way to achieve on-going compliance monitoring in an organization?

  A. Outsource compliance to a 3rd party vendor and let them manage the program.

  B. Have Compliance Direct Information Security to fix issues after the auditor's report.

  C. Only check compliance right before the auditors are scheduled to arrive onsite.

  D. Have Compliance and Information Security partner to correct issues as they arise.

  Correct Answer: D

• Question 225:

  Who is responsible for securing networks during a security incident?

  A. Security Operations Center (SOC)

  B. Chief Information Security Officer (CISO)

  C. Disaster Recovery (DR) manager

  D. Incident response Team (IRT)

  Correct Answer: D

• Question 226:

  Which of the following is the MOST important for a CISO to understand when identifying threats?

  A. How the security operations team will behave to reported incidents

  B. How vulnerabilities can potentially be exploited in systems that impact the organization

  C. How the firewall and other security devices are configured to prevent attacks

  D. How the incident management team prepares to handle an attack

  Correct Answer: B

• Question 227:

  What is the MAIN reason for conflicts between Information Technology and Information Security programs?

  A. The effective implementation of security controls can be viewed as an inhibitor to rapid Information technology implementations.

  B. Technology Governance is focused on process risks whereas Security Governance is focused on business risk.

  C. Technology governance defines technology policies and standards while security governance does not.

  D. Security governance defines technology best practices and Information Technology governance does not.

  Correct Answer: A

• Question 228:

  Which of the following activities results in change requests?

  A. Corrective actions

  B. Defect repair

  C. Preventive actions

  D. Inspection

  Correct Answer: C

• Question 229:

  IT control objectives are useful to IT auditors as they provide the basis for understanding the:

  A. The audit control checklist

  B. Technique for securing information

  C. Desired results or purpose of implementing specific control procedures.

  D. Security policy

  Correct Answer: A

  Corrective actions involve addressing identified issues or problems within a system or process to prevent their recurrence. When corrective actions are implemented, they often require change requests to modify the existing system or process. These change requests capture the necessary modifications or updates needed to rectify the identified issues and improve the overall performance or functionality. Therefore, corrective actions typically lead to change requests as part of the process for implementing the necessary changes.

• Question 230:

  Which of the following backup sites takes the longest recovery time?

  A. Hot site

  B. Cold site

  C. Mobile backup site

  D. Warm site

  Correct Answer: B