EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 341:

  Which of the following BEST describes an international standard framework that is based on the security model Information Technology-Code of Practice for Information Security Management?

  A. National Institute of Standards and technology Special Publication SP 800-12
  B. Request for Comment 2196
  C. International Organization for Standardization 27001
  D. National Institute of Standards and technology Special Publication SP 800-26
  C. International Organization for Standardization 27001

• Question 342:

  Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates. When multiple regulations or standards apply to your industry you should set controls to meet the___________________________.

  A. Most complex standard
  B. Recommendations of your Legal Staff
  C. Easiest regulation or standard to implement
  D. Stricter regulation or standard
  D. Stricter regulation or standard

  ---

  Explanation/Reference:

  The question is clear "When multiple regulations or standards apply to your industry..." so the answer is D. If you don't implement the stricter one, you will be out of compliance and subject to whatever the fines are.

• Question 343:

  What standard provides a comprehensive framework for information security risk management within organizations?

  A. Information Technology Infrastructure Library (ITIL)
  B. Information Security Management System (ISMS)
  C. NIST 800-218
  D. International Standards Organization (ISO) 27005
  D. International Standards Organization (ISO) 27005

  ---

  Explanation/Reference:

• Question 344:

  When deploying an Intrusion Prevention System (IPS), the BEST way to get maximum protection from the system is to deploy it___________

  A. In-line and turn on alert mode to stop malicious traffic.
  B. In promiscuous mode and block malicious traffic.
  C. In promiscuous mode and only detect malicious traffic.
  D. In-line and turn on blocking mode to stop malicious traffic in-line.
  D. In-line and turn on blocking mode to stop malicious traffic in-line.

• Question 345:

  How often should the SSAE16 report of your vendors be reviewed?

  A. Quarterly
  B. Semi-annually
  C. Bi-annually
  D. Annually
  D. Annually

• Question 346:

  When should IT security project management be outsourced?

  A. On projects not forecasted in the yearly budget
  B. When organizational resources are limited
  C. When the benefits of outsourcing outweigh the inherent risks of outsourcing
  D. On new, enterprise-wide security initiatives
  C. When the benefits of outsourcing outweigh the inherent risks of outsourcing

• Question 347:

  When gathering security requirements for an automated business process improvement program, which of the following is MOST important?

  A. Type of data contained in the process/system
  B. Type of encryption required for the data once it is at rest
  C. Type of computer the data is processed on
  D. Type of connection/protocol used to transfer the data
  A. Type of data contained in the process/system

• Question 348:

  What is generally the FIRST step in Information Security program development?

  A. Design
  B. Plan
  C. Execute
  D. Assess
  B. Plan

  ---

  Explanation/Reference:

• Question 349:

  The process of identifying and classifying assets is typically included in the________________.

  A. Threat analysis process
  B. Business Impact Analysis
  C. Asset configuration management process
  D. Disaster Recovery plan
  B. Business Impact Analysis

• Question 350:

  In defining a strategic security plan for an organization, what should a CISO first analyze?

  A. Reach out to a business similar to yours and ask for their plan
  B. Set goals that are difficult to attain to drive more productivity
  C. Review business acquisitions for the past 3 years
  D. Analyze the broader organizational strategic plan
  D. Analyze the broader organizational strategic plan

  ---

  Explanation/Reference:

  Reference: https://securityintelligence.com/the-importance-of-building-an-information-security-strategic-plan/