EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 251:

  A system was hardened at the Operating System level and placed into the production environment. Months later an audit was performed and it identified insecure configuration different from the original hardened state.

  Which of the following security issues is the MOST likely reason leading to the audit findings?

  A. Lack of asset management processes
  B. Lack of hardening standards
  C. Lack of proper access controls
  D. Lack of change management processes
  D. Lack of change management processes

• Question 252:

  When evaluating a Managed Security Services Provider (MSSP), which service(s) is/are most important:

  A. Patch management
  B. Network monitoring
  C. Ability to provide security services tailored to the business' needs
  D. 24/7 tollfree number
  C. Ability to provide security services tailored to the business' needs

  ---

  Explanation/Reference:

  Reference: https://digitalguardian.com/blog/how-hire-evaluate-managed-security-service-providers-mssps

• Question 253:

  Quantitative Risk Assessments have the following advantages over qualitative risk assessments:

  A. They are subjective and can be completed more quickly
  B. They are objective and express risk / cost in approximates
  C. They are subjective and can express risk / cost in real numbers
  D. They are objective and can express risk / cost in real numbers
  D. They are objective and can express risk / cost in real numbers

• Question 254:

  Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.

  Which of the following is the reason the CISO has not been able to advance the security agenda in this organization?

  A. Lack of business continuity process
  B. Lack of identification of technology stake holders
  C. Lack of a security awareness program
  D. Lack of influence with leaders outside IT
  D. Lack of influence with leaders outside IT

• Question 255:

  Scenario: Your program is developed around minimizing risk to information by focusing on people, technology, and operations. You have decided to deal with risk to information from people first.

  How can you minimize risk to your most sensitive information before granting access?

  A. Set your firewall permissions aggressively and monitor logs regularly.
  B. Develop an Information Security Awareness program
  C. Conduct background checks on individuals before hiring them
  D. Monitor employee drowsing and surfing habits
  B. Develop an Information Security Awareness program

  ---

  Explanation/Reference:

  Developing an Information Security Awareness program is crucial for educating employees about the importance of protecting sensitive information and promoting secure practices. This program can include training sessions, workshops, and regular communication to raise awareness about security risks, policies, and best practices

• Question 256:

  The newly appointed CISO of an organization is reviewing the IT security strategic plan.

  Which of the following is the MOST important component of the strategic plan?

  A. There is a clear definition of the IT security mission and vision.
  B. The plan requires return on investment for all security projects.
  C. There is integration between IT security and business staffing
  D. There is an auditing methodology in place.
  A. There is a clear definition of the IT security mission and vision.

• Question 257:

  According to the National Institute of Standards and Technology (NIST) SP 800-40, which of the following considerations are MOST important when creating a vulnerability management program?

  A. Susceptibility to attack, expected duration of attack, and mitigation availability
  B. Attack vectors, controls cost, and investigation staffing needs
  C. Susceptibility to attack, mitigation response time, and cost
  D. Vulnerability exploitation, attack recovery, and mean time to repair
  C. Susceptibility to attack, mitigation response time, and cost

• Question 258:

  Scenario: Your program is developed around minimizing risk to information by focusing on people, technology, and operations.

  An effective way to evaluate the effectiveness of an information security awareness program for end users, especially senior executives, is to conduct periodic:

  A. Baseline of computer systems
  B. Password changes
  C. Controlled spear phishing campaigns
  D. Scanning for viruses
  C. Controlled spear phishing campaigns

• Question 259:

  When performing a forensic investigation, what are the two MOST common data sources for obtaining evidence from a computer and mobile devices?

  A. RAM and unallocated space
  B. Unallocated space and RAM
  C. Slack space and browser cache
  D. Persistent and volatile data
  D. Persistent and volatile data

  ---

  Explanation/Reference:

  Reference: https://study.com/academy/lesson/data-storage-formats-digital-forensics-devices-types.html

• Question 260:

  When creating contractual agreements and procurement processes why should security requirements be included?

  A. To make sure the security process aligns with the vendor's security process
  B. To make sure they are added on after the process is completed
  C. To make sure the costs of security is included and understood
  D. To make sure the patching process is included with the costs
  C. To make sure the costs of security is included and understood