EC-COUNCIL EC-COUNCIL Certifications 712-50 Questions & Answers

• Question 261:

  Access Control lists (ACLs), Firewalls, and Intrusion Prevention Systems are examples of________________.

  A. User segmentation controls

  B. Software segmentation controls

  C. Network based security detective controls

  D. Network based security preventative controls

  Correct Answer: D

• Question 262:

  The formal certification and accreditation process has four primary steps, what are they?

  A. Evaluating, describing, testing and authorizing

  B. Auditing, documenting, verifying, certifying

  C. Evaluating, purchasing, testing, authorizing

  D. Discovery, testing, authorizing, certifying

  Correct Answer: A

• Question 263:

  The newly appointed CISO of an organization is reviewing the IT security strategic plan.

  Which of the following is the MOST important component of the strategic plan?

  A. There is a clear definition of the IT security mission and vision.

  B. The plan requires return on investment for all security projects.

  C. There is integration between IT security and business staffing

  D. There is an auditing methodology in place.

  Correct Answer: A

• Question 264:

  Which of the following is a countermeasure to prevent unauthorized database access from web applications?

  A. Removing all stored procedures

  B. Library control

  C. Input sanitization

  D. Session encryption

  Correct Answer: C

• Question 265:

  The process for identifying, collecting, and producing digital information in support of legal proceedings is called _____________________________.

  A. chain of custody

  B. electronic review

  C. evidence tampering

  D. electronic discovery

  Correct Answer: A

• Question 266:

  An anonymity network is a series of?

  A. Covert government networks

  B. Virtual network tunnels

  C. Government networks in Tora

  D. War driving maps

  Correct Answer: B

• Question 267:

  A system is designed to dynamically block offending Internet IP-addresses from requesting services from a secure website.

  This type of control is considered______________________.

  A. Preventive detection control

  B. Corrective security control

  C. Zero-day attack mitigation

  D. Dynamic blocking control

  Correct Answer: B

• Question 268:

  Your incident handling manager detects a virus attack in the network of your company. You develop a signature based on the characteristics of the detected virus.

  Which of the following phases in the incident handling process will utilize the signature to resolve this incident?

  A. Eradication

  B. Containment

  C. Recovery

  D. Identification

  Correct Answer: A

• Question 269:

  When updating the security strategic planning document what two items must be included?

  A. Alignment with the business goals and the vision of the CIO

  B. The risk tolerance of the company and the company mission statement

  C. The alignment with the business goals and the risk tolerance

  D. The executive summary and vision of the board of directors

  Correct Answer: C

• Question 270:

  Which of the following is considered the foundation for the Enterprise Information Security Architecture (EISA)?

  A. Data classification

  B. Security regulations

  C. Information security policy

  D. Asset classification

  Correct Answer: C