EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 301:

  From an information security perspective, information that no longer supports the main purpose of the business should be:

  A. protected under the information classification policy
  B. analyzed under the data ownership policy
  C. assessed by a business impact analysis.
  D. analyzed under the retention policy.
  D. analyzed under the retention policy.

• Question 302:

  Providing oversight of a comprehensive information security program for the entire organization is the primary responsibility of which group under the InfoSec governance framework?

  A. Office of the General Counsel
  B. Office of the Auditor
  C. Senior Executives
  D. All employees and users
  C. Senior Executives

• Question 303:

  What is the primary reason for performing vendor management?

  A. To define the partnership for long-term success
  B. To understand the risk coverage that are being mitigated by the vendor
  C. To establish a vendor selection process
  D. To document the relationship between the company and vendor
  B. To understand the risk coverage that are being mitigated by the vendor

• Question 304:

  Which of the following information may be found in table top exercises for incident response?

  A. Real-time to remediate
  B. Process improvements
  C. Security budget augmentation
  D. Security control selection
  B. Process improvements

• Question 305:

  The security team has investigated the theft/loss of several unencrypted laptop computers containing sensitive corporate information. To prevent the loss of any additional corporate data, it is unilaterally decided by the CISO that all existing and future laptop computers will be encrypted. The help desk is then flooded with complaints about the slow performance of the laptops and users are upset.

  Which of the following best describes what the CISO did wrong?

  A. Failed to identify all stakeholders and their needs
  B. Deployed the encryption solution in an inadequate manner
  C. Used 1024 bit encryption when 256 bit would have sufficed
  D. Used hardware encryption instead of software encryption
  A. Failed to identify all stakeholders and their needs

• Question 306:

  The risk found after a control has been fully implemented is called:

  A. Total Risk
  B. Transferred Risk
  C. Residual Risk
  D. Post Implementation Risk
  C. Residual Risk

• Question 307:

  Acme Inc. has engaged a third party vendor to provide 99.999% up-time for their online web presence and had them contractually agree to this service level agreement.

  What type of risk tolerance is Acme exhibiting?

  A. medium-high risk-tolerance
  B. low risk-tolerance
  C. high risk-tolerance
  D. moderate risk-tolerance
  B. low risk-tolerance

• Question 308:

  An organization licenses and uses personal information for business operations, and a server containing that information has been compromised.

  What kind of law would require notifying the owner or licensee of this incident?

  A. Consumer right disclosure
  B. Data breach disclosure
  C. Special circumstance disclosure
  D. Security incident disclosure
  B. Data breach disclosure

• Question 309:

  Which of the following is the MAIN reason to follow a formal risk management process in an organization that hosts and uses privately identifiable information (PII) as part of their business models and processes?

  A. Need to comply with breach disclosure laws
  B. Fiduciary responsibility to safeguard credit information
  C. Need to transfer the risk associated with hosting PII data
  D. Need to better understand the risk associated with using PII data
  D. Need to better understand the risk associated with using PII data

• Question 310:

  As the Business Continuity Coordinator of a financial services organization, you are responsible for ensuring assets are recovered timely in the event of a disaster. Which is the BEST Disaster Recovery performance indicator to validate that you are prepared for a disaster?

  A. Recovery Point Objective (RPO)
  B. Disaster Recovery Plan
  C. Recovery Time Objective (RTO)
  D. Business Continuity Plan
  D. Business Continuity Plan

  ---

  Explanation/Reference:

  Reference: https://www.resolver.com/resource/bcdr-metrics-that-matter/