EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 431:

  The patching and monitoring of systems on a consistent schedule is required by?

  A. Industry best practices
  B. Audit best practices
  C. Risk Management framework
  D. Local privacy laws
  A. Industry best practices

  ---

  Explanation/Reference:

  The patching and monitoring of systems on a consistent schedule is required by industry best practices. Industry standards and guidelines, such as those provided by organizations like the National Institute of Standards and Technology (NIST), the Center for Internet Security (CIS), and the International Organization for Standardization (ISO), emphasize the importance of regular patching and monitoring as fundamental security practices

• Question 432:

  What is the difference between encryption and tokenization?

  A. Tokenization combined with hashing is always better than encryption
  B. Encryption can be mathematically reversed to provide the original information
  C. The token contains the all original information
  D. Tokenization can be mathematically reversed to provide the original information
  B. Encryption can be mathematically reversed to provide the original information

  ---

  Explanation/Reference:

  Reference: http://library.ahima.org/doc?oid=104090#.X_dwWolR3eQ

• Question 433:

  What is the estimate of all direct and indirect costs associated with an asset or acquisition over its entire life cycle?

  A. Total Cost of Production
  B. Total Cost of Ownership
  C. Return on Investment
  D. Total Cost of Product
  B. Total Cost of Ownership

  ---

  Explanation/Reference:

• Question 434:

  Scenario: Your corporate systems have been under constant probing and attack from foreign IP addresses for more than a week. Your security team and security infrastructure have performed well under the stress. You are confident that your defenses have held up under the test, but rumors are spreading that sensitive customer data has been stolen and is now being sold on the Internet by criminal elements. During your investigation of the rumored compromise you discover that data has been breached and you have discovered the repository of stolen data on a server located in a foreign country.

  Your team now has full access to the data on the foreign server. Your defenses did not hold up to the test as originally thought. As you investigate how the data was compromised through log analysis you discover that a hardworking, but misguided business intelligence analyst posted the data to an obfuscated URL on a popular cloud storage service so they could work on it from home during their off-time.

  Which technology or solution could you deploy to prevent employees from removing corporate data from your network?

  A. Rigorous syslog reviews
  B. Intrusion Detection Systems (IDS)
  C. Security Guards posted outside the Data Center
  D. Data Loss Prevention (DLP)
  D. Data Loss Prevention (DLP)

• Question 435:

  As the CISO, you are the project sponsor for a highly visible log management project. The objective of the project is to centralize all the enterprise logs into a security information and event management (SIEM) system. You requested the results of the performance quality audits activity.

  The performance quality audit activity is done in what project management process group?

  A. Executing
  B. Controlling
  C. Planning
  D. Closing
  A. Executing

  ---

  Explanation/Reference:

  Reference: https://blog.masterofproject.com/executing-process-group-project-management/#:~:text=Executing%20Process%20Group%20Activity%20%2310,of%20the%20project%20are%20met

• Question 436:

  What process defines the framework of rules and practices by which a board of directors ensure accountability, fairness and transparency in an organization's relationship with its shareholders?

  A. Internal Audit
  B. Corporate governance
  C. Risk Oversight
  D. Key Performance Indicators
  B. Corporate governance

  ---

  Explanation/Reference:

  Reference: https://www.igi-global.com/dictionary/corporate-governance/5957

• Question 437:

  An organization information security policy serves to___________________.

  A. define security configurations for systems
  B. establish budgetary input in order to meet compliance requirements
  C. establish acceptable systems and user behavior
  D. define relationships with external law enforcement agencies
  E. None
  C. establish acceptable systems and user behavior

• Question 438:

  You are just hired as the new CISO and are being briefed on all the Information Security projects that your section has on going. You discover that most projects are behind schedule and over budget. Using the best business practices for project management you determine that the project correct aligns with the company goals.

  What needs to be verified FIRST?

  A. Training of the personnel on the project
  B. Timeline of the project milestones
  C. Vendor for the project
  D. Scope of the project
  D. Scope of the project

• Question 439:

  Control Objectives for Information and Related Technology (COBIT) is which of the following?

  A. An audit guideline for certifying secure systems and controls
  B. An information Security audit standard
  C. A framework for Information Technology management and governance
  D. A set of international regulations for Information Technology governance
  C. A framework for Information Technology management and governance

• Question 440:

  An organization has decided to develop an in-house BCM capability. The organization has determined it is best to follow a BCM standard published by the International Organization for Standardization (ISO). The BEST ISO standard to follow that outlines the complete lifecycle of BCM is?

  A. ISO 22318 Supply Chain Continuity
  B. ISO 27031 BCM Readiness
  C. ISO 22301 BCM Requirements
  D. ISO 22317 BIA
  C. ISO 22301 BCM Requirements

  ---

  Explanation/Reference:

  Reference: https://www.smartsheet.com/content/iso-22301-business-continuity-guide