EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 41:

  Which wireless encryption technology makes use of temporal keys?

  A. Wi-Fi Protected Access version 2 (WPA2)
  B. Wireless Equivalence Protocol (WEP)
  C. Wireless Application Protocol (WAP)
  D. Extensible Authentication Protocol (EAP)
  A. Wi-Fi Protected Access version 2 (WPA2)

• Question 42:

  What is the relationship between information protection and regulatory compliance?

  A. That all information in an organization must be protected equally.
  B. The information required to be protected by regulatory mandate does not have to be identified in the organizations data classification policy.
  C. There is no relationship between the two.
  D. That the protection of some information such as National ID information is mandated by regulation and other information such as trade secrets are protected based on business need.
  D. That the protection of some information such as National ID information is mandated by regulation and other information such as trade secrets are protected based on business need.

• Question 43:

  Which of the following is used to establish and maintain a framework to provide assurance that information security strategies are aligned with organizational objectives?

  A. Governance
  B. Compliance
  C. Awareness
  D. Management
  A. Governance

• Question 44:

  Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.

  Which of the following frameworks and standards will BEST fit the organization as a baseline for their security program?

  A. NIST and Privacy Regulations
  B. NIST and Data Breach Notification Laws
  C. ISO 27000 and Payment Card Industry Data Security Standards
  D. ISO 27000 and Human resources best practices
  C. ISO 27000 and Payment Card Industry Data Security Standards

• Question 45:

  The network administrator wants to strengthen physical security in the organization. Specifically, to implement a solution stopping people from entering certain restricted zones without proper credentials. Which of following physical security measures should the administrator use?

  A. Video surveillance
  B. Mantrap
  C. Bollards
  D. Fence
  B. Mantrap

  ---

  Explanation/Reference:

• Question 46:

  What is the primary difference between regulations and standards?

  A. Standards will include regulations
  B. Standards that aren't followed are punishable by fines
  C. Regulations are made enforceable by the power provided by laws
  D. Regulations must be reviewed and approved by the business
  C. Regulations are made enforceable by the power provided by laws

• Question 47:

  Acceptable levels of information security risk tolerance in an organization should be determined by?

  A. Corporate compliance committee
  B. CEO and board of director
  C. CISO with reference to the company goals
  D. Corporate legal counsel
  B. CEO and board of director

• Question 48:

  Your company has a "no right to privacy" notice on all logon screens for your information systems and users sign an Acceptable Use Policy informing them of this condition. A peer group member and friend comes to you and requests access to one of her employee's email account.

  What should you do?

  A. Deny the request citing national privacy laws
  B. None
  C. Grant her access, the employee has been adequately warned through the AUP.
  D. Assist her with the request, but only after her supervisor signs off on the action.
  E. Reset the employee's password and give it to the supervisor.
  D. Assist her with the request, but only after her supervisor signs off on the action.

• Question 49:

  To make sure that the actions of all employees, applications, and systems follow the organization's rules and regulations can BEST be described as which of the following?

  A. Compliance management
  B. Asset management
  C. Risk management
  D. Security management
  A. Compliance management

  ---

  Explanation/Reference:

• Question 50:

  Which of the following illustrates an operational control process:

  A. Classifying an information system as part of a risk assessment
  B. Conducting an audit of the configuration management process
  C. Installing an appropriate fire suppression system in the data center
  D. Establishing procurement standards for cloud vendors
  C. Installing an appropriate fire suppression system in the data center