EC-COUNCIL EC-COUNCIL Certifications 712-50 Questions & Answers

• Question 291:

  Which of the following functions evaluates patches used to close software vulnerabilities and perform validation of new systems to assure compliance with security?

  A. Incident response

  B. Risk management

  C. System security administration

  D. System testing

  Correct Answer: C

  This function is directly responsible for maintaining the security of systems. It includes tasks such as applying patches to fix vulnerabilities, configuring systems securely, and validating new systems for compliance with security standards. This is the most relevant function for the activities described in your question.

• Question 292:

  Knowing the potential financial loss an organization is willing to suffer if a system fails is a determination of which of the following?

  A. Cost benefit

  B. Risk appetite

  C. Business continuity

  D. Likelihood of impact

  Correct Answer: B

• Question 293:

  Which of the following methods are used to define contractual obligations that force a vendor to meet customer expectations?

  A. Terms and Conditions

  B. Statements of Work

  C. Service Level Agreements (SLA)

  D. Key Performance Indicators (KPI)

  Correct Answer: C

• Question 294:

  A CISO sees abnormally high volumes of exceptions to security requirements and constant pressure from business units to change security processes.

  Which of the following represents the MOST LIKELY cause of this situation?

  A. Poor audit support for the security program

  B. Poor alignment of the security program to business needs

  C. This is normal since business units typically resist security requirements

  D. A lack of executive presence within the security program

  Correct Answer: B

• Question 295:

  Which of the following can the company implement in order to avoid this type of security issue in the future?

  A. Network based intrusion detection systems

  B. An audit management process

  C. A security training program for developers

  D. A risk management process

  Correct Answer: C

• Question 296:

  Which of the following methodologies references the recommended industry standard that all project managers should follow?

  A. The Security Systems Development Life Cycle

  B. Project Management System Methodology

  C. Project Management Body of Knowledge

  D. The Security Project and Management Methodology

  Correct Answer: C

• Question 297:

  A CISO implements smart cards for credential management, and as a result has reduced costs associated with help desk operations supporting password resets.

  This demonstrates which of the following principles?

  A. Increased security program presence

  B. Regulatory compliance effectiveness

  C. Security organizational policy enforcement

  D. Proper organizational policy enforcement

  Correct Answer: D

  The implementation of smart cards for credential management, resulting in reduced costs associated with help desk operations supporting password resets, demonstrates the principle of proper organizational policy enforcement. By implementing smart cards, the CISO is enforcing the organizational policy of using strong authentication mechanisms and reducing reliance on password-based authentication. This action aligns with the security policy and demonstrates the proper implementation and enforcement of organizational policies. Option C, security organizational policy enforcement, is similar to the correct answer but is not as comprehensive. The implementation of smart cards is a specific instance of enforcing a security organizational policy, rather than encompassing the broader concept of policy enforcement in general.

  Therefore, the most appropriate answer is D. Proper organizational policy enforcement.

• Question 298:

  Which of the following is considered a project versus a managed process?

  A. ongoing risk assessment of routine operations

  B. continuous vulnerability assessment and vulnerability repair

  C. monitoring external and internal environment during incident response

  D. installation of a new firewall system

  Correct Answer: D

• Question 299:

  A CISO has recently joined an organization with a poorly implemented security program. The desire is to base the security program on a risk management approach.

  Which of the following is a foundational requirement in order to initiate this type of program?

  A. A complete inventory of Information technology assets including infrastructure, networks, applications and data

  B. A security organization that is adequately staffed to apply required mitigation strategies and regulatory compliance solutions

  C. A clear set of security policies and procedures that are more concept-based than controls-based than controls-based

  D. A clearly identified executive sponsor who will champion the effort to ensure organizational buy-in

  Correct Answer: D

• Question 300:

  Which of the following items of a computer system will an anti-virus program scan for viruses?

  A. Boot Sector

  B. Password Protected Files

  C. Windows Process List

  D. Deleted Files

  Correct Answer: A