EC-COUNCIL EC-COUNCIL Certifications 712-50 Questions & Answers

• Question 271:

  Which of the following is the MAIN security concern for public cloud computing?

  A. Unable to control physical access to the servers

  B. Unable to patch systems as needed

  C. Unable to run anti-virus scans

  D. Unable to track log on activity

  Correct Answer: A

• Question 272:

  The total cost of security controls should:

  A. Be equal to the value information resource being protected

  B. Should not matter, as long as the information resource is protected

  C. Be greater than the value of the information resource being protected

  D. Be less than the value of the information resource being protected

  Correct Answer: D

• Question 273:

  Your organization provides open guest wireless access with no captive portals. What can you do to assist with law enforcement investigations if one of your guests is suspected of committing an illegal act using your network?

  A. Provide IP and MAC address

  B. Disable SSID Broadcast and enable MAC address filtering on all wireless access points.

  C. Install a firewall software on each wireless access point.

  D. Configure logging on each access point

  Correct Answer: A

• Question 274:

  The rate of change in technology increases the importance of:

  A. Hiring personnel with leading edge skills.

  B. Understanding user requirements.

  C. Outsourcing the IT functions.

  D. Implementing and enforcing good processes.

  Correct Answer: D

• Question 275:

  Acceptable levels of information security risk tolerance in an organization should be determined by?

  A. Corporate compliance committee

  B. CEO and board of director

  C. CISO with reference to the company goals

  D. Corporate legal counsel

  Correct Answer: B

• Question 276:

  As the CISO, you need to create an IT security strategy.

  Which of the following is the MOST important thing to review before you start writing the plan?

  A. The existing IT environment

  B. Other corporate technology trends

  C. The company business plan

  D. The present IT budget

  Correct Answer: C

• Question 277:

  You are having a penetration test done on your company network and the leader of the team says they discovered all the network devices because no one had changed the Simple Network Management Protocol (SNMP) community strings from the defaults.

  Which of the following is a default community string?

  A. Public

  B. Administrator

  C. Execute

  D. Read

  Correct Answer: A

• Question 278:

  What is the BEST reason for having a formal request for proposal process?

  A. Creates a timeline for purchasing and budgeting

  B. Informs suppliers a company is going to make a purchase

  C. Clearly identifies risks and benefits before funding is spent

  D. Allows small companies to compete with larger companies

  Correct Answer: B

  Informs suppliers a company is going to make a purchase" .

  informing supplier is the main goal of RFP . while business case where you identify risks

• Question 279:

  Your company has limited resources to spend on security initiatives. The Chief Financial Officer asks you to prioritize the protection of information resources based on their value to the company. It is essential that you be able to communicate in language that your fellow executives will understand.

  You should:

  A. Create a detailed technical executive summary

  B. Create timelines for mitigation

  C. Calculate annual loss expectancy

  D. Develop a cost-benefit analysis

  Correct Answer: D

• Question 280:

  The Annualized Loss Expectancy (Before) minus Annualized Loss Expectancy (After) minus Annual Safeguard Cost is the formula for determining: A. Single Loss Expectancy

  B. Life Cycle Loss Expectancy

  C. Safeguard Value

  D. Cost Benefit Analysis

  Correct Answer: D