EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 21:

  Which type of physical security control scan a person's external features through a digital video camera before granting access to a restricted area?

  A. Iris scan
  B. Retinal scan
  C. Facial recognition scan
  D. Signature kinetics scan
  C. Facial recognition scan

• Question 22:

  Many successful cyber-attacks currently include:

  A. Phishing Attacks
  B. Misconfigurations
  C. Social engineering
  D. All of these
  D. All of these

  ---

  Explanation/Reference:

• Question 23:

  Which of the following is MOST important when dealing with an Information Security Steering committee?

  A. Ensure that security policies and procedures have been vetted and approved.
  B. Review all past audit and compliance reports.
  C. Include a mix of members from different departments and staff levels.
  D. Be briefed about new trends and products at each meeting by a vendor.
  B. Review all past audit and compliance reports.

• Question 24:

  Your incident response plan should include which of the following?

  A. Procedures for classification
  B. Procedures for charge-back
  C. Procedures for reclamation
  D. Procedures for litigation
  A. Procedures for classification

• Question 25:

  A security professional has been promoted to be the CISO of an organization. The first task is to create a security policy for this organization. The CISO creates and publishes the security policy.

  This policy, however, is ignored and not enforced consistently. Which of the following is the MOST likely reason for the policy shortcomings?

  A. Lack of a formal risk management policy
  B. Lack of a formal security policy governance process
  C. Lack of formal definition of roles and responsibilities
  D. Lack of a formal security awareness program
  B. Lack of a formal security policy governance process

• Question 26:

  Which of the following is a weakness of an asset or group of assets that can be exploited by one or more threats?

  A. Vulnerability
  B. Threat
  C. Exploitation
  D. Attack vector
  A. Vulnerability

• Question 27:

  Risk is defined as:

  A. Quantitative plus qualitative impact
  B. Asset loss times likelihood of event
  C. Advisory plus capability plus vulnerability
  D. Threat times vulnerability divided by control
  B. Asset loss times likelihood of event

  ---

  Explanation/Reference:

  risk = likelihood x impact (or damage incurred by the event. If you put a dollar value on the impact, then you can value the risk and in a simple way compare one risk factor to another)

• Question 28:

  Who is responsible for verifying that audit directives are implemented?

  A. IT Management
  B. Internal Audit
  C. IT Security
  D. BOD Audit Committee
  B. Internal Audit

  ---

  Explanation/Reference:

  Reference: https://www.eccouncil.org/information-security-management/

• Question 29:

  Which of the following can the company implement in order to avoid this type of security issue in the future?

  A. Network based intrusion detection systems
  B. An audit management process
  C. A security training program for developers
  D. A risk management process
  C. A security training program for developers

• Question 30:

  You are just hired as the new CISO and are being briefed on all the Information Security projects that your section has on going. You discover that most projects are behind schedule and over budget. Using the best business practices for project management you determine that the project correctly aligns with the company goals and the scope of the project is correct.

  What is the NEXT step?

  A. Verify resources
  B. Review time schedules
  C. Verify budget
  D. Verify constraints
  A. Verify resources