EC-COUNCIL EC-COUNCIL Certifications 712-50 Questions & Answers

• Question 251:

  Your penetration testing team installs an in-line hardware key logger onto one of your network machines.

  Which of the following is of major concern to the security organization?

  A. In-line hardware keyloggers are undetectable by software

  B. In-line hardware keyloggers are relatively inexpensive

  C. In-line hardware keyloggers don't require physical access

  D. In-line hardware keyloggers don't comply to industry regulations

  Correct Answer: A

• Question 252:

  Which of the following conditions would be the MOST probable reason for a security project to be rejected by the executive board of an organization?

  A. The NPV of the project is negative

  B. The return on Investment (ROI) is larger than 10 months

  C. The Net Present value (NPV) of the project is positive

  D. The ROI is lower than 10 months

  Correct Answer: A

• Question 253:

  A customer of a bank has placed a dispute on a payment for a credit card account. The banking system uses digital signatures to safeguard the integrity of their transactions. The bank claims that the system shows proof that the customer in fact made the payment.

  What is this system capability commonly known as?

  A. conflict resolution

  B. strong authentication

  C. non-repudiation

  D. digital rights management

  Correct Answer: C

• Question 254:

  Which of the following is MOST important when tuning an Intrusion Detection System (IDS)?

  A. Log retention

  B. Storage encryption

  C. Type of authentication

  D. Trusted and untrusted networks

  Correct Answer: D

• Question 255:

  What is the primary reason for performing vendor management?

  A. To define the partnership for long-term success

  B. To understand the risk coverage that are being mitigated by the vendor

  C. To establish a vendor selection process

  D. To document the relationship between the company and vendor

  Correct Answer: B

• Question 256:

  Physical security measures typically include which of the following components?

  A. Strong password, Biometric, Common Access Card

  B. Technical. Strong Password, Operational

  C. Operational, Biometric, Physical

  D. Physical, Technical, Operational

  Correct Answer: A

• Question 257:

  Network Forensics is the prerequisite for any successful legal action after attacks on your Enterprise Network.

  Which is the single most important factor to introducing digital evidence into a court of law?

  A. Expert forensics witness

  B. Fully trained network forensic expects to analyze all data right after the attack

  C. Uninterrupted Chain of Custody

  D. Comprehensive Log-Files from all servers and network devices affected during the attack

  Correct Answer: C

• Question 258:

  What is the primary reason for performing a return on investment analysis?

  A. To determine the current present value of a project

  B. To determine the annual rate of loss

  C. To decide between multiple vendors

  D. To decide is the solution costs less than the risk it is mitigating

  Correct Answer: D

• Question 259:

  While designing a secondary data center for your company what document needs to be analyzed to determine to how much should be spent on building the data center?

  A. Business continuity plan

  B. Application mapping document

  C. Disaster recovery strategic plan

  D. Enterprise Risk Assessment

  Correct Answer: C

• Question 260:

  Annual Loss Expectancy is derived from the function of which two factors?

  A. Annual rate of Occurrence and Single Loss Expectancy

  B. Annual rate of Occurrence and Asset Value

  C. Safeguard value and Annual Rate of Occurrence

  D. Single Loss Expectancy and Exposure factor

  Correct Answer: A