EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 31:

  Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.

  From an Information Security Leadership perspective, which of the following is a MAJOR concern about the CISO's approach to security?

  A. Compliance centric agenda
  B. IT security centric agenda
  C. Lack of risk management process
  D. Lack of sponsorship from executive management
  D. Lack of sponsorship from executive management

  ---

  Explanation/Reference:

• Question 32:

  Credit card information, medical data, and government records are all examples of:

  A. None
  B. Communications Information
  C. Bodily Information
  D. Confidential/Protected Information
  E. Territorial Information
  D. Confidential/Protected Information

• Question 33:

  Which of the following refers to the quantity or quality of project deliverables expanding from the original project plan?

  A. Scope creep
  B. Deadline extension
  C. Deliverable expansion
  D. Scope modification
  A. Scope creep

• Question 34:

  Which of the following is the mechanism that provides decision-makers the information they need to understand the risk factors that may adversely affect the operations and affect the outputs of the company processes?

  A. Business Impact Analysis
  B. Critical Process Assessment
  C. Vulnerability Assessment
  D. Risk Assessment
  D. Risk Assessment

  ---

  Explanation/Reference:

  Reference: https://www.mindtools.com/pages/article/newTMC_07.htm

• Question 35:

  Which of the following backup sites takes the longest recovery time?

  A. Hot site
  B. Cold site
  C. Mobile backup site
  D. Warm site
  B. Cold site

• Question 36:

  Your IT auditor is reviewing significant events from the previous year and has identified some procedural oversights.

  Which of the following would be the MOST concerning?

  A. Failure to notify police of an attempted intrusion
  B. Lack of reporting of a successful denial of service attack on the network.
  C. Lack of periodic examination of access rights
  D. Lack of notification to the public of disclosure of confidential information
  D. Lack of notification to the public of disclosure of confidential information

• Question 37:

  Creating a secondary authentication process for network access would be an example of?

  A. An administrator with too much time on their hands
  B. Supporting the concept of layered security
  C. Network segmentation
  D. Putting undue time commitment on the system administrator
  B. Supporting the concept of layered security

• Question 38:

  How often should an environment be monitored for cyber threats, risks, and exposures?

  A. Weekly
  B. Daily
  C. Monthly
  D. Quarterly
  B. Daily

• Question 39:

  You have a system with 2 identified risks. You determine the probability of one risk occurring is higher than the

  A. Relative likelihood of event
  B. Controlled mitigation effort
  C. Risk impact comparison
  D. Comparative threat analysis
  A. Relative likelihood of event

• Question 40:

  A CISO wants to change the defense strategy to ward off attackers. To accomplish this the CISO is looking to a strategy where attackers are lured into a zone of a safe network where attackers can be monitored, controlled, quarantined, or eradicated.

  A. Moderate investment
  B. Passive monitoring
  C. Integrated security controls
  D. Dynamic deception
  D. Dynamic deception