EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 311:

  IT control objectives are useful to IT auditors as they provide the basis for understanding the:

  A. The audit control checklist
  B. Technique for securing information
  C. Desired results or purpose of implementing specific control procedures.
  D. Security policy
  A. The audit control checklist

  ---

  Explanation/Reference:

  Corrective actions involve addressing identified issues or problems within a system or process to prevent their recurrence. When corrective actions are implemented, they often require change requests to modify the existing system or process. These change requests capture the necessary modifications or updates needed to rectify the identified issues and improve the overall performance or functionality. Therefore, corrective actions typically lead to change requests as part of the process for implementing the necessary changes.

• Question 312:

  Scenario: The new CISO was informed of all the Information Security projects that the section has in progress. Two projects are over a year behind schedule and way over budget.

  Which of the following will be most helpful for getting an Information Security project that is behind schedule back on schedule?

  A. Upper management support
  B. Involve internal audit
  C. More frequent project milestone meetings
  D. More training of staff members
  A. Upper management support

• Question 313:

  Which of the following is the PRIMARY purpose of International Organization for Standardization (ISO) 27001?

  A. Implementation of business-enabling information security
  B. Use within an organization to ensure compliance with laws and regulations
  C. To enable organizations that adopt it to obtain certifications
  D. Use within an organization to formulate security requirements and objectives
  A. Implementation of business-enabling information security

• Question 314:

  Optical biometric recognition such as retina scanning provides access to facilities through reading the unique characteristics of a person's eye. However, authorization failures can occur with individuals who have?

  A. Glaucoma or cataracts
  B. Two different colored eyes (heterochromia iridium)
  C. Contact lens
  D. Malaria
  A. Glaucoma or cataracts

• Question 315:

  Scenario: You are the CISO and have just completed your first risk assessment for your organization. You find many risks with no security controls, and some risks with inadequate controls. You assign work to your staff to create or adjust existing security controls to ensure they are adequate for risk mitigation needs.

  When adjusting the controls to mitigate the risks, how often should the CISO perform an audit to verify the controls?

  A. Never
  B. Quarterly
  C. Annually
  D. Semi-annually
  C. Annually

  ---

  Explanation/Reference:

• Question 316:

  Which of the following is considered to be an IT governance framework and a supporting toolset that allows for managers to bridge the gap between control requirements, technical issues, and business risks?

  A. Information technology Infrastructure Library (ITIL)
  B. Committee of Sponsoring Organizations (COSO)
  C. Control Objective for Information Technology (COBIT)
  D. Payment Card Industry (PCI)
  C. Control Objective for Information Technology (COBIT)

• Question 317:

  Which of the following has the GREATEST impact on the implementation of an information security governance model?

  A. Complexity of organizational structure
  B. Distance between physical locations
  C. Organizational budget
  D. Number of employees
  A. Complexity of organizational structure

• Question 318:

  You have implemented the new controls. What is the next step?

  A. Perform a risk assessment
  B. Monitor the effectiveness of the controls
  C. Document the process for the stakeholders
  D. Update the audit findings report
  B. Monitor the effectiveness of the controls

• Question 319:

  What is one key difference between Capital expenditures and Operating expenditures?

  A. Operating expense cannot be written off while Capital expense can
  B. Operating expenses can be depreciated over time and Capital expenses cannot
  C. Capital expenses cannot include salaries and Operating expenses can
  D. Capital expenditures allow for the cost to be depreciated over time and Operating does not
  D. Capital expenditures allow for the cost to be depreciated over time and Operating does not

  ---

  Explanation/Reference:

• Question 320:

  A company wants to fill a Chief Information Security Officer position in the organization. They need to define and implement a more holistic security program.

  Which of the following qualifications and experience would be MOST desirable to find in a candidate?

  A. Industry certifications, technical knowledge and program management skills
  B. Multiple references, strong background check and industry certifications
  C. Multiple certifications, strong technical capabilities and lengthy resume
  D. College degree, audit capabilities and complex project management
  A. Industry certifications, technical knowledge and program management skills