EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 421:

  Which of the following conditions would be the MOST probable reason for a security project to be rejected by the executive board of an organization?

  A. The NPV of the project is negative
  B. The return on Investment (ROI) is larger than 10 months
  C. The Net Present value (NPV) of the project is positive
  D. The ROI is lower than 10 months
  A. The NPV of the project is negative

• Question 422:

  Step-by-step procedures to regain normalcy in the event of a major earthquake is PRIMARILY covered by which of the following plans?

  A. Damage control plan
  B. Disaster recovery plan
  C. Business Continuity plan
  D. Incident response plan
  C. Business Continuity plan

  ---

  Explanation/Reference:

• Question 423:

  You have recently drafted a revised information security policy. From whom should you seek endorsement in order to have the GREATEST chance for adoption and implementation throughout the entire organization?

  A. Chief Executive Officer
  B. Chief Information Officer
  C. Chief Information Security Officer
  D. Chief Information Officer
  A. Chief Executive Officer

• Question 424:

  A cloud computing environment that is bound together by technology that allows data and applications to be shared between public and private clouds is BEST referred to as a?

  A. Public cloud
  B. Private cloud
  C. Community cloud
  D. Hybrid cloud
  D. Hybrid cloud

  ---

  Explanation/Reference:

  Reference: https://www.datacenters.com/services/cloud-services#:~:text=Hybrid%20clouds%20combine%20public%20and,flexibility%20and%20more%20deployment%20options

• Question 425:

  When information security falls under the Chief Information Officer (CIO), what is their MOST essential role?

  A. Oversees the organization's day-to-day operations, creating the policies and strategies that govern operations
  B. Enlisting support from key executives the information security program budget and policies
  C. Charged with developing and implementing policies designed to protect employees and customers' data from unauthorized access
  D. Responsible for the success or failure of the IT organization and setting strategic direction
  D. Responsible for the success or failure of the IT organization and setting strategic direction

  ---

  Explanation/Reference:

  Reference: https://www.investopedia.com/terms/c/cio.asp

• Question 426:

  A global retail company is creating a new compliance management process.

  Which of the following regulations is of MOST importance to be tracked and managed by this process?

  A. Information Technology Infrastructure Library (ITIL)
  B. National Institute for Standards and technology (NIST) standard
  C. International Organization for Standardization (ISO) standards
  D. Payment Card Industry Data Security Standards (PCI-DSS)
  C. International Organization for Standardization (ISO) standards

  ---

  Explanation/Reference:

  PCI-DSS is not a regulation as tnagy says. NIST is US based. It is a global company. The best answer is ISO.

• Question 427:

  From the CISO's perspective in looking at financial statements, the statement of retained earnings of an organization:

  A. Has a direct correlation with the CISO's budget
  B. Represents, in part, the savings generated by the proper acquisition and implementation of security controls
  C. Represents the sum of all capital expenditures
  D. Represents the percentage of earnings that could in part be used to finance future security controls
  B. Represents, in part, the savings generated by the proper acquisition and implementation of security controls

  ---

  Explanation/Reference:

  Reference: https://www.investopedia.com/terms/s/statement-of-retained-earnings.asp

• Question 428:

  An international organization is planning a project to implement encryption technologies to protect company confidential information. This organization has data centers on three continents.

  Which of the following would be considered a MAJOR constraint for the project?

  A. Compliance to local hiring laws
  B. Encryption import/export regulations
  C. Local customer privacy laws
  D. Time zone differences
  B. Encryption import/export regulations

• Question 429:

  Which type of scan is used on the eye to measure the layer of blood vessels?

  A. Facial recognition scan
  B. Iris scan
  C. Signature kinetics scan
  D. Retinal scan
  D. Retinal scan

• Question 430:

  You have been hired as the Information System Security Officer (ISSO) for a US federal government agency. Your role is to ensure the security posture of the system is maintained. One of your tasks is to develop and maintain the system security plan (SSP) and supporting documentation.

  Which of the following is NOT documented in the SSP?

  A. The controls in place to secure the system
  B. Name of the connected system
  C. The results of a third-party audits and recommendations
  D. Type of information used in the system
  D. Type of information used in the system

  ---

  Explanation/Reference: