EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 321:

  When managing a project, the MOST important activity in managing the expectations of stakeholders is:

  A. To force stakeholders to commit ample resources to support the project
  B. To facilitate proper communication regarding outcomes
  C. To assure stakeholders commit to the project start and end dates in writing
  D. To finalize detailed scope of the project at project initiation
  B. To facilitate proper communication regarding outcomes

  ---

  Explanation/Reference:

  Reference: https://www.greycampus.com/blog/project-management/stakeholder-management-what-is-it-and-why-is-it-so-important

• Question 322:

  Information security policies should be reviewed _____________________.

  A. by the internal audit semiannually
  B. by the CISO when new systems are brought online
  C. by the Incident Response team after an audit
  D. by stakeholders at least annually
  D. by stakeholders at least annually

• Question 323:

  What is the MOST critical output of the incident response process?

  A. A complete document of all involved team members and the support they provided
  B. Recovery of all data from affected systems
  C. Lessons learned from the incident, so they can be incorporated into the incident response processes
  D. Clearly defined documents detailing standard evidence collection and preservation processes
  C. Lessons learned from the incident, so they can be incorporated into the incident response processes

  ---

  Explanation/Reference:

  Reference: https://www.eccouncil.org/incident-response-plan-phases/

• Question 324:

  What is the main purpose of the Incident Response Team?

  A. Communicate details of information security incidents
  B. Create effective policies detailing program activities
  C. Ensure efficient recovery and reinstate repaired systems
  D. Provide effective employee awareness programs
  C. Ensure efficient recovery and reinstate repaired systems

• Question 325:

  Which of the following functions implements and oversees the use of controls to reduce risk when creating an information security program?

  A. Risk Assessment
  B. Risk Management
  C. Incident Response
  D. Network Security administration
  B. Risk Management

• Question 326:

  Who is responsible for securing networks during a security incident?

  A. Security Operations Center (SOC)
  B. Chief Information Security Officer (CISO)
  C. Disaster Recovery (DR) manager
  D. Incident response Team (IRT)
  D. Incident response Team (IRT)

• Question 327:

  Which of the following is a primary method of applying consistent configurations to IT systems?

  A. Audits
  B. Administration
  C. Patching
  D. Templates
  D. Templates

  ---

  Explanation/Reference:

  Templates provide a standardized and efficient way to apply consistent configurations to IT systems. A template is a pre-defined configuration or set of settings that can be applied to multiple systems or devices. By using templates, organizations can ensure that systems are configured consistently according to best practices and security requirements.

• Question 328:

  What type of attack requires the least amount of technical equipment and has the highest success rate?

  A. Social engineering
  B. Shrink wrap attacks
  C. Operating system attacks
  D. War driving
  A. Social engineering

• Question 329:

  What is the FIRST step in developing the vulnerability management program?

  A. Baseline the Environment
  B. Define policy
  C. Maintain and Monitor
  D. Organization Vulnerability
  A. Baseline the Environment

• Question 330:

  What two methods are used to assess risk impact?

  A. Quantitative and qualitative
  B. Qualitative and percent of loss realized
  C. Subjective and Objective
  D. Cost and annual rate of expectance
  A. Quantitative and qualitative