EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 281:

  Which of the following items of a computer system will an anti-virus program scan for viruses?

  A. Boot Sector
  B. Password Protected Files
  C. Windows Process List
  D. Deleted Files
  A. Boot Sector

• Question 282:

  An application vulnerability assessment has identified a security flaw in an application. This is a flaw that was previously identified and remediated on a prior release of the application.

  Which of the following is MOST likely the reason for this recurring issue?

  A. Lack of version/source controls
  B. Lack of change management controls
  C. Ineffective configuration management controls
  D. High turnover in the application development department
  B. Lack of change management controls

  ---

  Explanation/Reference:

  The most likely reason for the recurring security flaw in the application, even after it was previously identified and remediated, is option B: Lack of change management controls.

  Change management controls refer to processes and procedures in place to manage and control changes to an application or system. These controls ensure that proper documentation, testing, and approval processes are followed before implementing changes. In this scenario, the recurring security flaw suggests that there may be a lack of effective change management controls in place.

• Question 283:

  Which of the following is a term related to risk management that represents the estimated frequency at which a threat is expected to transpire?

  A. Temporal Probability (TP)
  B. Annualized Rate of Occurrence (ARO)
  C. Single Loss Expectancy (SLE)
  D. Exposure Factor (EF)
  B. Annualized Rate of Occurrence (ARO)

• Question 284:

  Which of the following is the MOST effective method to counter phishing attacks?

  A. User awareness and training
  B. Host based Intrusion Detection System (IPS)
  C. Acceptable use guide signed by all system users
  D. Antispam solution
  A. User awareness and training

  ---

  Explanation/Reference:

  Reference: https://aware.eccouncil.org/4-best-ways-to-stop-phishing-with-security-awareness.html

• Question 285:

  What is an approach to estimating the strengths and weaknesses of alternatives used to determine options, which provide the BEST approach to achieving benefits while preserving savings called?

  A. Business Impact Analysis
  B. Economic Impact analysis
  C. Return on Investment
  D. Cost-benefit analysis
  D. Cost-benefit analysis

  ---

  Explanation/Reference:

  Reference: https://artsandculture.google.com/entity/cost%E2%80%93benefit-analysis/m020w0x?hl=en

• Question 286:

  Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates.

  What is one proven method to account for common elements found within separate regulations and/or standards?

  A. Design your program to meet the strictest government standards
  B. Develop a crosswalk
  C. Hire a GRC expert
  D. Use the Find function of your word processor
  B. Develop a crosswalk

• Question 287:

  What are the common data hiding techniques used by criminals?

  A. Unallocated space and masking
  B. Website defacement and log manipulation
  C. Disabled Logging and admin elevation
  D. Encryption, Steganography, and Changing Metadata/Timestamps
  D. Encryption, Steganography, and Changing Metadata/Timestamps

  ---

  Explanation/Reference:

  Reference: https://cisomag.eccouncil.org/challenges-and-applications-of-digital-forensics/

• Question 288:

  Human resource planning for security professionals in your organization is a:

  A. Training requirement that is on-going and always changing.
  B. Simple and easy task because the threats are getting easier to find and correct.
  C. Training requirement that is met through once every year user training.
  D. Not needed because automation and anti-virus software has eliminated the threats.
  A. Training requirement that is on-going and always changing.

• Question 289:

  Security related breaches are assessed and contained through which of the following?

  A. The IT support team
  B. A forensic analysis
  C. Physical security team
  D. Incident response
  D. Incident response

• Question 290:

  Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN.

  Once supervisors and data owners have approved requests, information system administrators will implement:

  A. Management control(s)
  B. Technical control(s)
  C. Operational control(s)
  D. Policy controls(s)
  B. Technical control(s)