EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 401:

  ABC Limited has recently suffered a security breach with customers' social security number available on the dark web for sale. The CISO, during the time of the incident, has been fired, and you have been hired as the replacement. The analysis of the breach found that the absence of an insider threat program, lack of least privilege policy, and weak access control was to blame. You would like to implement key performance indicators to mitigate the risk.

  Which metric would meet the requirement?

  A. Number of times third parties access critical information systems
  B. Number of systems with known vulnerabilities
  C. Number of users with elevated privileges
  D. Number of websites with weak or misconfigured certificates
  C. Number of users with elevated privileges

• Question 402:

  A stakeholder is a person or group:

  A. Vested in the success and/or failure of a project or initiative regardless of budget implications.
  B. That will ultimately use the system.
  C. That has budget authority.
  D. Vested in the success and/or failure of a project or initiative and is tied to the project budget.
  A. Vested in the success and/or failure of a project or initiative regardless of budget implications.

• Question 403:

  Which of the following is a countermeasure to prevent unauthorized database access from web applications?

  A. Removing all stored procedures
  B. Library control
  C. Input sanitization
  D. Session encryption
  C. Input sanitization

• Question 404:

  The rate of change in technology increases the importance of:

  A. Hiring personnel with leading edge skills.
  B. Understanding user requirements.
  C. Outsourcing the IT functions.
  D. Implementing and enforcing good processes.
  D. Implementing and enforcing good processes.

• Question 405:

  Smith, the project manager for a larger multi-location firm, is leading a software project team that has 18 members, 5 of which are assigned to testing. Due to recent recommendations by an organizational quality audit team, the project manager is convinced to add a quality professional to lead to test team at additional cost to the project.

  The project manager is aware of the importance of communication for the success of the project and takes the step of introducing additional communication channels, making it more complex, in order to assure quality levels of the project. What will be the first project management document that Smith should change in order to accommodate additional communication channels?

  A. WBS document
  B. Scope statement
  C. Change control document
  D. Risk management plan
  A. WBS document

• Question 406:

  Your incident handling manager detects a virus attack in the network of your company. You develop a signature based on the characteristics of the detected virus.

  Which of the following phases in the incident handling process will utilize the signature to resolve this incident?

  A. Eradication
  B. Containment
  C. Recovery
  D. Identification
  A. Eradication

• Question 407:

  What is the BEST way to achieve on-going compliance monitoring in an organization?

  A. Outsource compliance to a 3rd party vendor and let them manage the program.
  B. Have Compliance Direct Information Security to fix issues after the auditor's report.
  C. Only check compliance right before the auditors are scheduled to arrive onsite.
  D. Have Compliance and Information Security partner to correct issues as they arise.
  D. Have Compliance and Information Security partner to correct issues as they arise.

• Question 408:

  During the course of a risk analysis your IT auditor identified threats and potential impacts. Next, your IT auditor should:

  A. Identify and assess the risk assessment process used by management.
  B. Identify and evaluate existing controls.
  C. Identify information assets and the underlying systems.
  D. Disclose the threats and impacts to management.
  B. Identify and evaluate existing controls.

• Question 409:

  Which of the following statements below regarding Key Performance indicators (KPIs) are true?

  A. Development of KPI's are most useful when done independently
  B. They are a strictly quantitative measure of success
  C. They should be standard throughout the organization versus domain-specific so they are more easily correlated
  D. They are a strictly qualitative measure of success
  C. They should be standard throughout the organization versus domain-specific so they are more easily correlated

  ---

  Explanation/Reference:

• Question 410:

  SQL injection is a very popular and successful injection attack method. Identify the basic SQL injection text:

  A. "DROPTABLE USERNAME"
  B. NOPS
  C. /../../../../
  D. `O 1=1 -
  D. `O 1=1 -