EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 241:

  Which of the following methodologies references the recommended industry standard that all project managers should follow?

  A. The Security Systems Development Life Cycle
  B. Project Management System Methodology
  C. Project Management Body of Knowledge
  D. The Security Project and Management Methodology
  C. Project Management Body of Knowledge

• Question 242:

  A newly-hired CISO needs to understand the organization's financial management standards for business units and operations. Which of the following would be the best source of this information?

  A. The internal accounting department
  B. The Chief Financial Officer (CFO)
  C. The external financial audit service
  D. The managers of the accounts payables and accounts receivables teams
  B. The Chief Financial Officer (CFO)

  ---

  Explanation/Reference:

• Question 243:

  The organization does not have the time to remediate the vulnerability; however it is critical to release the application.

  Which of the following needs to be further evaluated to help mitigate the risks?

  A. Provide security testing tools
  B. Provide developer security training
  C. Deploy Intrusion Detection Systems
  D. Implement Compensating Controls
  D. Implement Compensating Controls

• Question 244:

  Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN.

  What type of control is being implemented by supervisors and data owners?

  A. Management
  B. Technical
  C. Operational
  D. Administrative
  C. Operational

• Question 245:

  Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years. This global retail company is expected to accept credit card payments.

  Which of the following is of MOST concern when defining a security program for this organization?

  A. Adherence to local data breach notification laws
  B. Compliance to Payment Card Industry (PCI) data security standards
  C. Compliance with local government privacy laws
  D. International encryption restrictions
  B. Compliance to Payment Card Industry (PCI) data security standards

• Question 246:

  Which of the following best summarizes the primary goal of a security program?

  A. Provide security reporting to all levels of an organization
  B. Manage risk within the organization
  C. Create effective security awareness to employees
  D. Assure regulatory compliance
  B. Manage risk within the organization

• Question 247:

  John is the project manager for a large project in his organization. A new change request has been proposed that will affect several areas of the project. One area of the project change impact is on work that a vendor has already completed. The vendor is refusing to make the changes as they've already completed the project work they were contracted to do.

  What can John do in this instance?

  A. Withhold the vendor's payments until the issue is resolved.
  B. refer to the contract agreement for direction.
  C. Refer the vendor to the Service Level Agreement (SLA) and insist that they make the changes.
  D. Review the Request for proposal (RFP) for guidance.
  B. refer to the contract agreement for direction.

• Question 248:

  The establishment of a formal risk management framework and system authorization program is essential. The LAST step of the system authorization process is:

  A. Getting authority to operate the system from executive management
  B. Contacting the Internet Service Provider for an IP scope
  C. Changing the default passwords
  D. Conducting a final scan of the live system and mitigating all high and medium level vulnerabilities
  A. Getting authority to operate the system from executive management

• Question 249:

  Which of the following are necessary to formulate responses to external audit findings?

  A. Technical Staff, Budget Authority, Management
  B. Technical Staff, Internal Audit, Budget Authority
  C. Internal Audit, Budget Authority, Management
  D. Internal Audit, management, and Technical Staff
  A. Technical Staff, Budget Authority, Management

• Question 250:

  When managing an Information Security Program, which of the following is of MOST importance in order to influence the culture of an organization?

  A. Compliance with local privacy regulations
  B. An independent Governance, Risk and Compliance organization
  C. Support Legal and HR teams
  D. Alignment of security goals with business goals
  D. Alignment of security goals with business goals