EC-COUNCIL 712-50 Online Practice Questions and Exam Preparation

EC-COUNCIL 712-50 Online Questions & Answers

• Question 61:

  Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda. From an Information Security Leadership perspective, which of the following is a MAJOR concern about the CISO's approach to security?

  A. Compliance centric agenda
  B. IT security centric agenda
  C. Lack of risk management process
  D. Lack of sponsorship from executive management
  D. Lack of sponsorship from executive management

  ---

  Explanation/Reference:

• Question 62:

  File Integrity Monitoring (FIM) is considered a________________________.

  A. Network-based security preventative control
  B. Software segmentation control
  C. User segmentation control
  D. Security detective control
  D. Security detective control

• Question 63:

  When a CISO considers delaying or not remediating system vulnerabilities which of the following are MOST important to take into account?

  A. Threat Level, Risk of Compromise, and Consequences of Compromise
  B. Risk Avoidance, Threat Level, and Consequences of Compromise
  C. Reputational Impact, Financial impact, and Risk of Compromise
  D. Risk transfer, reputational Impact, and Consequences of Compromise
  A. Threat Level, Risk of Compromise, and Consequences of Compromise

• Question 64:

  Which of the following activities must be completed BEFORE you can calculate risk?

  A. Assigning a value to each information asset
  B. Assessing the relative risk facing the organization's information assets
  C. Determining the likelihood that vulnerable systems will be attacked by specific threats
  D. Calculating the risks to which assets are exposed in their current setting
  A. Assigning a value to each information asset

• Question 65:

  Which of the following is a benefit of a risk-based approach to audit planning?

  A. Resources are allocated to the areas of the highest concern
  B. Scheduling may be performed months in advance
  C. Budgets are more likely to be met by the IT audit staff
  D. Staff will be exposed to a variety of technologies
  A. Resources are allocated to the areas of the highest concern

• Question 66:

  Which International Organization for Standardization (ISO) below BEST describes the performance of risk management, and includes a five-stage risk management methodology.

  A. ISO 27005
  B. ISO 27004
  C. ISO 27002
  D. ISO 27001
  A. ISO 27005

• Question 67:

  When selecting a security solution with recurring maintenance costs after the first year, the CISO should:

  A. Defer selection until the market improves and cash flow is positive
  B. Implement the solution and ask for the increased operating cost budget when it is time
  C. Communicate future operating costs to the CIO/CFO and seek commitment from them to ensure the new solution's continued use
  D. Cut other essential programs to ensure the new solution's continued use
  C. Communicate future operating costs to the CIO/CFO and seek commitment from them to ensure the new solution's continued use

  ---

  Explanation/Reference:

  Reference: https://books.google.com/books?id=kiE_EAAAQBAJandpg=PT59andlpg=PT59anddq=Communicate+future+operating+costs+to+the+CIO/CFO+and+seek+commitment+from+them+to+ensure+the+new+solution%E2%80%99s +continued+useandsource=blandots=3MNR-uuPjRandsig=ACfU3U1ibTQwVjKcrliRd3Dl-jpgY5Xlxwandhl=enandsa=Xandved=2ahUKEwiTjoDpuLv0AhU_SvEDHUvgCY4Q6AF6BAhAEAM#v=onepageandq=Communicate%20future%20operating%20costs% 20to%20the%20CIO%2FCFO%20and%20seek%20commitment%20from%20them%20to%20ensure%20the%20new%20solution%E2%80%99s%20continued%20useandf=false

• Question 68:

  A university recently hired a CISO. One of the first tasks is to develop a continuity of operations plan (COOP).

  In developing the business impact assessment (BIA), which of the following MOST closely relate to the data backup and restoral?

  A. Recovery Point Objective (RPO)
  B. Mean Time to Delivery (MTD)
  C. Recovery Time Objective (RTO)
  D. Maximum Tolerable Downtime (MTD)
  A. Recovery Point Objective (RPO)

  ---

  Explanation/Reference:

• Question 69:

  An organization has a number of Local Area Networks (LANs) linked to form a single Wide Area Network (WAN). Which of the following would BEST ensure network continuity?

  A. Third-party emergency repair contract
  B. Pre-built servers and routers
  C. Permanent alternative routing
  D. Full off-site backup of every server
  C. Permanent alternative routing

• Question 70:

  Which of the following is the MOST important reason for performing assessments of the security portfolio?

  A. To assure that the portfolio is aligned to the needs of the broader organization
  B. To create executive support of the portfolio
  C. To discover new technologies and processes for implementation within the portfolio
  D. To provide independent 3rd party reviews of security effectiveness
  A. To assure that the portfolio is aligned to the needs of the broader organization