EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 261:

  Which of the following represents the BEST method for obtaining business unit acceptance of security controls within an organization?

  A. Allow the business units to decide which controls apply to their systems, such as the encryption of sensitive data
  B. Ensure business units are involved in the creation of controls and defining conditions under which they must be applied
  C. Provide the business units with control mandates and schedules of audits for compliance validation
  D. Create separate controls for the business based on the types of business and functions they perform
  B. Ensure business units are involved in the creation of controls and defining conditions under which they must be applied

• Question 262:

  During a cyber incident, which non-security personnel might be needed to assist the security team?

  A. Threat analyst, IT auditor, forensic analyst
  B. Network engineer, help desk technician, system administrator
  C. CIO, CFO, CSO
  D. Financial analyst, payroll clerk, HR manager
  B. Network engineer, help desk technician, system administrator

  ---

  Explanation/Reference:

• Question 263:

  A CISO has implemented a risk management capability within the security portfolio. Which of the following terms best describes this functionality?

  A. Service
  B. Program
  C. Portfolio
  D. Cost center
  B. Program

• Question 264:

  An IT auditor has recently discovered that because of a shortage of skilled operations personnel, the security administrator has agreed to work one late night shift a week as the senior computer operator.

  The most appropriate course of action for the IT auditor is to:

  A. Review the system log for each of the late night shifts to determine whether any irregular actions occurred.
  B. Inform senior management of the risk involved.
  C. Develop a computer-assisted audit technique to detect instances of abuses of the arrangement.
  D. Agree to work with the security officer on these shifts as a form of preventative control.
  B. Inform senior management of the risk involved.

• Question 265:

  When analyzing and forecasting an operating expense budget what are not included?

  A. New datacenter to operate from
  B. Network connectivity costs
  C. Software and hardware license fees
  D. Utilities and power costs
  A. New datacenter to operate from

• Question 266:

  In terms of supporting a forensic investigation, it is now imperative that managers, firstresponders, etc., accomplish the following actions to the computer under investigation:

  A. Immediately place hard drive and other components in an anti-static bag
  B. Secure the area and attempt to maintain power until investigators arrive
  C. Secure the area and shut down the computer until investigators arrive
  D. Secure the area
  B. Secure the area and attempt to maintain power until investigators arrive

• Question 267:

  Which of the following best describes an access control process that confirms the identity of the entity seeking access to a logical or physical area?

  A. Identification
  B. Authorization
  C. Authentication
  D. Accountability
  C. Authentication

  ---

  Explanation/Reference:

• Question 268:

  Which business stakeholder is accountable for the integrity of a new information system?

  A. Compliance Officer
  B. CISO
  C. Project manager
  D. Board of directors
  B. CISO

• Question 269:

  Of the following types of SOCs (Security Operations Centers), which one would be MOST likely used if the CISO has decided to outsource the infrastructure and administration of it?

  A. Virtual
  B. Dedicated
  C. Fusion
  D. Command
  A. Virtual

  ---

  Explanation/Reference:

  Reference: https://www.techtarget.com/searchsecurity/definition/Security-Operations-Center-SOC

• Question 270:

  The ultimate goal of an IT security projects is:

  A. Support business requirements
  B. Implement information security policies
  C. Increase stock value
  D. Complete security
  A. Support business requirements