EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 291:

  Bob waits near a secured door, holding a box. He waits until an employee walks up to the secured door and uses the special card in order to access the restricted area of the target company. Just as the employee opens the door, Bob walks up to the employee (still holding the box) and asks the employee to hold the door open so that he can enter. What is the best way to undermine the social engineering activity of tailgating?

  A. Post a sign that states, "no tailgating" next to the special card reader adjacent to the secure door
  B. Issue special cards to access secure doors at the company and provide a one-time only brief description of use of the special card
  C. Educate and enforce physical security policies of the company to all the employees on a regular basis
  D. Setup a mock video camera next to the special card reader adjacent to the secure door
  C. Educate and enforce physical security policies of the company to all the employees on a regular basis

• Question 292:

  An organization recently acquired a Data Loss Prevention (DLP) solution, and two months after the implementation, it was found that sensitive data was posted to numerous Dark Web sites. The DLP application was checked, and there are no apparent malfunctions and no errors.

  What is the MOST likely reason why the sensitive data was posted?

  A. The DLP Solution was not integrated with mobile device anti-malware
  B. Data classification was not properly performed on the assets
  C. The sensitive data was not encrypted while at rest
  D. A risk assessment was not performed after purchasing the DLP solution
  B. Data classification was not properly performed on the assets

  ---

  Explanation/Reference:

• Question 293:

  An anonymity network is a series of?

  A. Covert government networks
  B. Virtual network tunnels
  C. Government networks in Tora
  D. War driving maps
  B. Virtual network tunnels

• Question 294:

  One of the MAIN goals of a Business Continuity Plan is to_______________.

  A. Ensure all infrastructure and applications are available in the event of a disaster
  B. Assign responsibilities to the technical teams responsible for the recovery of all data
  C. Provide step by step plans to recover business processes in the event of a disaster
  D. Allow all technical first-responders to understand their roles in the event of a disaster.
  C. Provide step by step plans to recover business processes in the event of a disaster

• Question 295:

  Physical security measures typically include which of the following components?

  A. Strong password, Biometric, Common Access Card
  B. Technical. Strong Password, Operational
  C. Operational, Biometric, Physical
  D. Physical, Technical, Operational
  A. Strong password, Biometric, Common Access Card

  ---

  Explanation/Reference:

• Question 296:

  Which of the following is considered a project versus a managed process?

  A. ongoing risk assessment of routine operations
  B. continuous vulnerability assessment and vulnerability repair
  C. monitoring external and internal environment during incident response
  D. installation of a new firewall system
  D. installation of a new firewall system

• Question 297:

  What is the SECOND step to creating a risk management methodology according to the National Institute of Standards and Technology (NIST) SP 800-30 standard?

  A. Mitigate risk
  B. Perform a risk assessment
  C. Determine appetite
  D. Evaluate risk avoidance criteria
  B. Perform a risk assessment

  ---

  Explanation/Reference:

  Perform the risk Assessment ( NIST Special Publication 800-30 which describes the process of assessing information security risk in support goal defined in SP 800-37 and SP 800-39 and include 4 Step: 1- Prepare for Assessment, 2Conduct Assesment, 3- Communicate results and 4- Maintain Assesment )

• Question 298:

  Which of the following activities is the MAIN purpose of the risk assessment process?

  A. Creating an inventory of information assets
  B. Calculating the risks to which assets are exposed in their current setting
  C. Classifying and organizing information assets into meaningful groups
  D. Assigning value to each information asset
  B. Calculating the risks to which assets are exposed in their current setting

• Question 299:

  What is defined as the process of envisioning a desired future and translating this vision into broadly defined goals or objectives and a sequence of steps to achieve them?

  A. Business Planning
  B. Tactical Planning
  C. Successor Planning
  D. Strategic Planning
  D. Strategic Planning

  ---

  Explanation/Reference:

  Reference: https://www.utmb.edu/osbp/institutional-strategic-planning-integration/strategic-planning-process#:~:text=Strategic%20Planning%20is%20a%20systematic,of%20steps%20to%20achieve%20them

• Question 300:

  What should an organization do to ensure that they have a sound Business Continuity (BC) Plan?

  A. Conduct a Disaster Recovery (DR) exercise every year to test the plan
  B. Conduct periodic tabletop exercises to refine the BC plan
  C. Test every three years to ensure that the BC plan is valid
  D. Define the Recovery Point Objective (RPO)
  A. Conduct a Disaster Recovery (DR) exercise every year to test the plan

  ---

  Explanation/Reference: