EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 371:

  In effort to save your company money which of the following methods of training results in the lowest cost for the organization?

  A. One-One Training
  B. Self-Study (noncomputerized)
  C. Distance learning/Web seminars
  D. Formal Class
  B. Self-Study (noncomputerized)

• Question 372:

  The ability to hold intruders accountable in a court of law is important. Which of the following activities are needed to ensure the highest possibility for successful prosecution?

  A. Establishing Enterprise-owned Botnets for preemptive attacks
  B. Collaboration with law enforcement
  C. Well established and defined and defined digital forensics process
  D. Be able to retaliate under the framework of Active defense
  C. Well established and defined and defined digital forensics process

• Question 373:

  Which of the following is a common technology for visual monitoring?

  A. Closed circuit television
  B. Open circuit television
  C. Blocked video
  D. Local video
  A. Closed circuit television

  ---

  Explanation/Reference:

  Reference: https://www.ifsecglobal.com/video-surveillance/role-cctv-cameras-public-privacy-protection/

• Question 374:

  Which of the following is a critical operational component of an Incident Response Program (IRP)?

  A. Monthly program tests to ensure resource allocation is sufficient for supporting the needs of the organization.
  B. Weekly program budget reviews to ensure the percentage of program funding remains constant.
  C. Annual review of program charters, policies, procedures and organizational agreements.
  D. Daily monitoring of vulnerability advisories relating to your organization's deployed technologies.
  C. Annual review of program charters, policies, procedures and organizational agreements.

  ---

  Explanation/Reference:

  Annual review of program charters, policies, procedures and organizational agreements.

• Question 375:

  What is the term describing the act of inspecting all real-time Internet traffic (i.e., packets) traversing a major Internet backbone without introducing any apparent latency?

  A. Deep-Packet inspection
  B. Traffic Analysis
  C. Heuristic analysis
  D. Packet sampling
  A. Deep-Packet inspection

• Question 376:

  Knowing the potential financial loss an organization is willing to suffer if a system fails is a determination of which of the following?

  A. Cost benefit
  B. Risk appetite
  C. Business continuity
  D. Likelihood of impact
  B. Risk appetite

• Question 377:

  Ensuring that the actions of a set of people, applications and systems follow the organization's rules is BEST described as:

  A. Compliance management
  B. Security management
  C. Risk management
  D. Mitigation management
  A. Compliance management

• Question 378:

  Creating a secondary authentication process for network access would be an example of?

  A. Defense in depth cost enumerated costs
  B. Nonlinearities in physical security performance metrics
  C. System hardening and patching requirements
  D. Anti-virus for mobile devices
  A. Defense in depth cost enumerated costs

  ---

  Explanation/Reference:

  Each letter here seem to have more than one answer. This is either layered security or MFA or similar.

• Question 379:

  Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant, but it is expected to grow to a global customer base of many millions of customers in just a few years. The organization has already been subject to a significant amount of credit card fraud.

  Which of the following is the MOST likely reason for this fraud?

  A. Lack of compliance to the Payment Card Industry (PCI) standards
  B. Ineffective security awareness program
  C. Lack of technical controls when dealing with credit card data
  D. Security practices not in alignment with ISO 27000 frameworks
  A. Lack of compliance to the Payment Card Industry (PCI) standards

• Question 380:

  Which of the following is the MOST effective way to measure the effectiveness of security controls on a perimeter network?

  A. Perform a vulnerability scan of the network
  B. Internal Firewall ruleset reviews
  C. Implement network intrusion prevention systems
  D. External penetration testing by a qualified third party
  D. External penetration testing by a qualified third party