EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 271:

  Scenario: Your company has many encrypted telecommunications links for their world-wide operations. Physically distributing symmetric keys to all locations has proven to be administratively burdensome, but symmetric keys are preferred to other alternatives.

  Symmetric encryption in general is preferable to asymmetric encryption when:

  A. The number of unique communication links is large
  B. The distance to the end node is farthest away
  C. The volume of data being transmitted is small
  D. The speed of the encryption / deciphering process is essential
  D. The speed of the encryption / deciphering process is essential

• Question 272:

  Scenario: You are the CISO and are required to brief the C-level executive team on your information security audit for the year. During your review of the audit findings, you discover that many of the controls that were put in place the previous year to correct some of the findings are not performing as needed. You have thirty days until the briefing.

  To formulate a remediation plan for the non-performing controls what other document do you need to review before adjusting the controls?

  A. Business continuity plan
  B. Security roadmap
  C. Business impact analysis
  D. Annual report to shareholders
  C. Business impact analysis

• Question 273:

  Which of the following is the MOST important goal of risk management?

  A. Finding economic balance between the impact of the risk and the cost of the control
  B. Identifying the victim of any potential exploits
  C. Identifying the risk
  D. Assessing the impact of potential threats
  A. Finding economic balance between the impact of the risk and the cost of the control

• Question 274:

  A global health insurance company is concerned about protecting confidential information.

  Which of the following is of MOST concern to this organization?

  A. Alignment with International Organization for Standardization (ISO) standards.
  B. Alignment with financial reporting regulations for each country where they operate.
  C. Compliance to the payment Card Industry (PCI) regulations.
  D. Compliance with patient data protection regulations for each country where they operate.
  D. Compliance with patient data protection regulations for each country where they operate.

• Question 275:

  Which of the following is an accurate statement regarding capital expenses?

  A. They are easily reduced through the elimination of usage, such as reducing power for lighting of work areas during off-hours
  B. Capital expenses can never be replaced by operational expenses
  C. Capital expenses are typically long-term investments with value being realized through their use
  D. The organization is typically able to regain the initial cost by selling this type of asset
  C. Capital expenses are typically long-term investments with value being realized through their use

  ---

  Explanation/Reference:

• Question 276:

  A Security Operations (SecOps) Manager is considering implementing threat hunting to be able to make better decisions on protecting information and assets. What is the MAIN goal of threat hunting to the SecOps Manager?

  A. Improve discovery of valid detected events
  B. Enhance tuning of automated tools to detect and prevent attacks
  C. Replace existing threat detection strategies
  D. Validate patterns of behavior related to an attack
  D. Validate patterns of behavior related to an attack

  ---

  Explanation/Reference:

  Threat intel is for detecting new patterns and indicators of attacks

• Question 277:

  Which of the following is a MAJOR consideration when an organization retains sensitive customer data and uses this data to better target the organization's products and services?

  A. Strong authentication technologies
  B. Financial reporting regulations
  C. Credit card compliance and regulations
  D. Local privacy laws
  D. Local privacy laws

• Question 278:

  If a CISO wants to understand the liabilities of the company, she will refer to the:

  A. Profit and Loss statement
  B. Statement of retained earnings
  C. Statement of proxy
  D. Balance sheet
  D. Balance sheet

  ---

  Explanation/Reference:

• Question 279:

  With a focus on the review and approval aspects of board responsibilities, the Data Governance Council recommends that the boards provide strategic oversight regarding information and information security, include these four things:

  A. Metrics tracking security milestones, understanding criticality of information and information security, visibility into the types of information and how it is used, endorsement by the board of directors
  B. Annual security training for all employees, continual budget reviews, endorsement of the development and implementation of a security program, metrics to track the program
  C. Understanding criticality of information and information security, review investment in information security, endorse development and implementation of a security program, and require regular reports on adequacy and effectiveness
  D. Endorsement by the board of directors for security program, metrics of security program milestones, annual budget review, report on integration and acceptance of program
  C. Understanding criticality of information and information security, review investment in information security, endorse development and implementation of a security program, and require regular reports on adequacy and effectiveness

  ---

  Explanation/Reference:

  Reference: https://nanopdf.com/download/information-security-governance-guidance-for-boards-of_pdf (9)

• Question 280:

  What is the main result of a company keeping its information security functions siloed in different business units?

  A. Overlapping security initiatives, with wasted resources, or major gaps that can lead to serious security compromises
  B. Board of Directors gains greater insight into the overall functions of the company and the separate security processes
  C. Greater integration between groups that takes greater effort and expense but results in close execution of processes
  D. Security and risk management teams have a responsibility to learn every aspect of the company and find ways to integrate into each silo
  A. Overlapping security initiatives, with wasted resources, or major gaps that can lead to serious security compromises

  ---

  Explanation/Reference:

  Reference: https://www.plixer.com/blog/data-silo-what-is-it-why-is-it-bad/