EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 451:

  A global retail organization is looking to implement a consistent Disaster Recovery and Business Continuity Process across all of its business units.

  Which of the following standards and guidelines can BEST address this organization's need?

  A. International Organization for Standardizations ?22301 (ISO-22301)
  B. Information Technology Infrastructure Library (ITIL)
  C. Payment Card Industry Data Security Standards (PCI-DSS)
  D. International Organization for Standardizations ?27005 (ISO-27005)
  A. International Organization for Standardizations ?22301 (ISO-22301)

• Question 452:

  Which of the following is considered one of the most frequent failures in project management?

  A. Overly restrictive management
  B. Insufficient resources
  C. Excessive personnel on project
  D. Failure to meet project deadlines
  D. Failure to meet project deadlines

• Question 453:

  How often should the Statements of Standards for Attestation Engagements-16 (SSAE16)/International Standard on Assurance Engagements 3402 (ISAE3402) report of your vendors be reviewed?

  A. Annually
  B. Quarterly
  C. Bi-annually
  D. Semi-annually
  A. Annually

• Question 454:

  When project costs continually increase throughout implementation due to large or rapid changes in customer or user requirements, this is commonly known as:

  A. Cost/benefit adjustments
  B. Scope creep
  C. Prototype issues
  D. Expectations management
  B. Scope creep

  ---

  Explanation/Reference:

  Reference: http://www.umsl.edu/~sauterv/analysis/6840_f03_papers/gurlen/

• Question 455:

  A person in your security team calls you at night and informs you that one of your web applications is potentially under attack from a cross-site scripting vulnerability.

  What do you do?

  A. tell him to shut down the server
  B. tell him to call the police
  C. tell him to invoke the incident response process
  D. tell him to analyze the problem, preserve the evidence and provide a full analysis and report.
  C. tell him to invoke the incident response process

• Question 456:

  An access point (AP) is discovered using Wireless Equivalent Protocol (WEP). The cipher text sent by the AP is encrypted with the same key and cipher used by its stations.

  What authentication method is being used?

  A. Open
  B. Asynchronous
  C. None
  D. Shared key
  D. Shared key

• Question 457:

  Which of the following is the BEST indicator of a successful project?

  A. it comes in at or below the expenditures planned for in the baseline budget
  B. it meets most of the specifications as outlined in the approved project definition
  C. it is completed on time or early as compared to the baseline project plan
  D. the deliverables are accepted by the key stakeholders
  D. the deliverables are accepted by the key stakeholders

• Question 458:

  You have been promoted to the CISO of a big-box retail store chain reporting to the Chief Information Officer (CIO). The CIO's first mandate to you is to develop a cybersecurity compliance framework that will meet all the store's compliance requirements.

  Which of the following compliance standard is the MOST important to the organization?

  A. The Federal Risk and Authorization Management Program (FedRAMP)
  B. ISO 27002
  C. NIST Cybersecurity Framework
  D. Payment Card Industry (PCI) Data Security Standard (DSS)
  D. Payment Card Industry (PCI) Data Security Standard (DSS)

  ---

  Explanation/Reference:

  Reference: https://searchcompliance.techtarget.com/definition/PCI-DSS-Payment-Card-Industry-Data-Security-Standard

• Question 459:

  The regular review of a firewall ruleset is considered a _______________________.

  A. Procedural control
  B. Organization control
  C. Management control
  D. Technical control
  A. Procedural control

• Question 460:

  What is the MOST important reason for monitoring Key Risk Indicators (KRIs)?

  A. The organization's risk profile is subject to change
  B. The processes used to develop KRIs can be fraught with errors and must be rechecked periodically
  C. Effective KRIs will reduce the time to implement risk treatment options
  D. A large number of KRIs is a critical part of continuous improvement of management
  A. The organization's risk profile is subject to change

  ---

  Explanation/Reference:

  Reference: https://searchcio.techtarget.com/definition/key-risk-indicator-KRI