EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 441:

  Which of the following provides an audit framework?

  A. Control Objectives for IT (COBIT)
  B. International Organization Standard (ISO) 27002
  C. Payment Card Industry 璂ata Security Standard (PCI-DSS)
  D. National Institute of Standards and technology (NIST) SP 800-30
  A. Control Objectives for IT (COBIT)

• Question 442:

  Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda. The CISO has been able to implement a number of technical controls and is able to influence the Information Technology teams but has not been able to influence the rest of the organization.

  From an organizational perspective, which of the following is the LIKELY reason for this?

  A. The CISO reports to the IT organization
  B. The CISO has not implemented a policy management framework
  C. The CISO does not report directly to the CEO of the organization
  D. The CISO has not implemented a security awareness program
  A. The CISO reports to the IT organization

• Question 443:

  The PRIMARY objective of security awareness is to:

  A. Encourage security-conscious employee behavior
  B. Put employees on notice in case follow-up action for noncompliance is necessary
  C. Ensure that security policies are read
  D. Meet legal and regulatory requirements
  A. Encourage security-conscious employee behavior

• Question 444:

  The total cost of security controls should:

  A. Be equal to the value information resource being protected
  B. Should not matter, as long as the information resource is protected
  C. Be greater than the value of the information resource being protected
  D. Be less than the value of the information resource being protected
  D. Be less than the value of the information resource being protected

• Question 445:

  A digital signature addresses which of the following concerns?

  A. Message alteration
  B. Message copying
  C. Message theft
  D. Unauthorized reading
  A. Message alteration

  ---

  Explanation/Reference:

  Reference: https://www.entrust.com/resources/certificate-solutions/learn/digital-signatures

• Question 446:

  A recent audit has identified a few control exceptions and is recommending the implementation of technology and processes to address the finding.

  Which of the following is the MOST likely reason for the organization to reject the implementation of the recommended technology and processes?

  A. The organization has purchased cyber insurance
  B. The risk tolerance of the organization permits this risk
  C. The CIO of the organization disagrees with the finding
  D. The auditors have not followed proper auditing processes
  B. The risk tolerance of the organization permits this risk

• Question 447:

  You manage a newly created Security Operations Center (SOC), your team is being inundated with security alerts and don't know what to do.

  What is the BEST approach to handle this situation?

  A. Tune the sensors to help reduce false positives so the team can react better
  B. Request additional resources to handle the workload
  C. Tell the team to do their best and respond to each alert
  D. Tell the team to only respond to the critical and high alerts
  A. Tune the sensors to help reduce false positives so the team can react better

• Question 448:

  Which one of the following BEST describes which member of the management team is accountable for the day-to-day operation of the information security program?

  A. Security managers
  B. Security analysts
  C. Security technicians
  D. Security administrators
  A. Security managers

• Question 449:

  Which of the following are the MOST important factors for proactively determining system vulnerabilities?

  A. Subscribe to vendor mailing lists and distribute notifications of system requirements
  B. Configure firewall, perimeter router and Intrusion Prevention System (IPS)
  C. Conduct security testing, vulnerability scanning, and penetration testing
  D. Deploy Intrusion Detection System (IDS) and install anti-virus on systems
  C. Conduct security testing, vulnerability scanning, and penetration testing

• Question 450:

  You are having a penetration test done on your company network and the leader of the team says they discovered all the network devices because no one had changed the Simple Network Management Protocol (SNMP) community strings from the defaults.

  Which of the following is a default community string?

  A. Public
  B. Administrator
  C. Execute
  D. Read
  A. Public