EC-COUNCIL EC-COUNCIL Certifications 712-50 Questions & Answers

• Question 321:

  When entering into a third party vendor agreement for security services, at what point in the process is it BEST to understand and validate the security posture and compliance level of the vendor?

  A. Prior to signing the agreement and before any security services are being performed

  B. Once the agreement has been signed and the security vendor states that they will need access to the network

  C. Once the vendor is on premise and before they perform security services

  D. At the time the security services are being performed and the vendor needs access to the network

  Correct Answer: A

• Question 322:

  An application vulnerability assessment has identified a security flaw in an application. This is a flaw that was previously identified and remediated on a prior release of the application. Which of the following is MOST likely the reason for this recurring issue?

  A. Lack of version/source controls

  B. Lack of change management controls

  C. Ineffective configuration management controls

  D. High turnover in the application development department

  Correct Answer: B

  The most likely reason for the recurring security flaw in the application, even after it was previously identified and remediated, is option B: Lack of change management controls.

  Change management controls refer to processes and procedures in place to manage and control changes to an application or system. These controls ensure that proper documentation, testing, and approval processes are followed before implementing changes. In this scenario, the recurring security flaw suggests that there may be a lack of effective change management controls in place.

• Question 323:

  What oversight should the information security team have in the change management process for application security?

  A. Information security should be aware of any significant application security changes and work with developer to test for vulnerabilities before changes are deployed in production

  B. Information security should be aware of all application changes and work with developers before changes and deployed in production

  C. Information security should be informed of changes to applications only

  D. Development team should tell the information security team about any application security flaws

  Correct Answer: A

• Question 324:

  When selecting a security solution with reoccurring maintenance costs after the first year

  A. Implement the solution and ask for the increased operating cost budget when it is time

  B. Communicate future operating costs to the CIO/CFO and seek commitment from them to ensure the new solution's continued use

  C. Defer selection until the market improves and cash flow is positive

  D. The CISO should cut other essential programs to ensure the new solution's continued use

  Correct Answer: B

• Question 325:

  Which of the following is the BEST indicator of a successful project?

  A. it comes in at or below the expenditures planned for in the baseline budget

  B. it meets most of the specifications as outlined in the approved project definition

  C. it is completed on time or early as compared to the baseline project plan

  D. the deliverables are accepted by the key stakeholders

  Correct Answer: D

• Question 326:

  Which of the following is the MOST important component of any change management process?

  A. Outage planning

  B. Scheduling

  C. Approval tracking

  D. Back-out procedures

  Correct Answer: C

  This is key to ensuring that all changes are reviewed, authorized, and documented before implementation. Approval tracking ensures accountability and oversight, which are critical for managing risks associated with changes. It helps in ensuring that changes align with the organization's policies, compliance requirements, and business objectives.

• Question 327:

  In order for a CISO to have true situational awareness there is a need to deploy technology that can give a real-time view of security events across the enterprise. Which of the following tools represents the BEST choice to achieve this awareness?

  A. Intrusion Detection System (IDS), firewall, switch, syslog

  B. Security Incident Event Management (SIEM), IDS, router, syslog

  C. VMware, router, switch, firewall, syslog, vulnerability management system (VMS)

  D. SIEM, IDS, firewall, VMS

  Correct Answer: D

• Question 328:

  Information Security is often considered an excessive, after-the-fact cost when a project or initiative is completed. What can be done to ensure that security is addressed cost effectively?

  A. Launch an internal awareness campaign

  B. Installation of new firewalls and intrusion detection systems

  C. Integrate security requirements into project inception

  D. User awareness training for all employees

  Correct Answer: C

• Question 329:

  You manage a newly created Security Operations Center (SOC), your team is being inundated with security alerts and don't know what to do. What is the BEST approach to handle this situation?

  A. Tune the sensors to help reduce false positives so the team can react better

  B. Request additional resources to handle the workload

  C. Tell the team to do their best and respond to each alert

  D. Tell the team to only respond to the critical and high alerts

  Correct Answer: A

• Question 330:

  The patching and monitoring of systems on a consistent schedule is required by?

  A. Industry best practices

  B. Audit best practices

  C. Risk Management framework

  D. Local privacy laws

  Correct Answer: A

  The patching and monitoring of systems on a consistent schedule is required by industry best practices. Industry standards and guidelines, such as those provided by organizations like the National Institute of Standards and Technology (NIST), the Center for Internet Security (CIS), and the International Organization for Standardization (ISO), emphasize the importance of regular patching and monitoring as fundamental security practices