EC-COUNCIL EC-COUNCIL Certifications 512-50 Questions & Answers

• Question 111:

  An organization has a number of Local Area Networks (LANs) linked to form a single Wide Area Network (WAN). Which of the following would BEST ensure network continuity?

  A. Third-party emergency repair contract

  B. Pre-built servers and routers

  C. Permanent alternative routing

  D. Full off-site backup of every server

  Correct Answer: C

• Question 112:

  Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.

  This global retail company is expected to accept credit card payments. Which of the following is of MOST concern when defining a security program for this organization?

  A. International encryption restrictions

  B. Compliance to Payment Card Industry (PCI) data security standards

  C. Compliance with local government privacy laws

  D. Adherence to local data breach notification laws

  Correct Answer: B

• Question 113:

  Scenario: The new CISO was informed of all the Information Security projects that the section has in progress. Two projects are over a year behind schedule and way over budget. Using the best business practices for project management, you determine that the project correctly aligns with the organization goals. What should be verified next?

  A. Scope

  B. Budget

  C. Resources

  D. Constraints

  Correct Answer: A

• Question 114:

  Which of the following is an accurate description of a balance sheet?

  A. The percentage of earnings that are retained by the organization for reinvestment in the business

  B. The details of expenses and revenue over a long period of time

  C. A summarized statement of all assets and liabilities at a specific point in time

  D. A review of regulations and requirements impacting the business from a financial perspective

  Correct Answer: C

• Question 115:

  Which of the following best describes the sensors designed to project and detect a light beam across an area?

  A. Smoke

  B. Thermal

  C. Air-aspirating

  D. Photo electric

  Correct Answer: D

  Reference: https://en.wikipedia.org/wiki/Photoelectric_sensor

• Question 116:

  Which of the following is the MOST logical method of deploying security controls within an organization?

  A. Obtain funding for all desired controls and then create project plans for implementation

  B. Apply the simpler controls as quickly as possible and use a risk-based approach for the more difficult and costly controls

  C. Apply the least costly controls to demonstrate positive program activity

  D. Obtain business unit buy-in through close communication and coordination

  Correct Answer: B

• Question 117:

  Scenario: You are the newly hired Chief Information Security Officer for a company that has not previously had a senior level security practitioner. The company lacks a defined security policy and framework for their Information Security Program. Your new boss, the Chief Financial Officer, has asked you to draft an outline of a security policy and recommend an industry/sector neutral information security control framework for implementation.

  Your Corporate Information Security Policy should include which of the following?

  A. Information security theory

  B. Roles and responsibilities

  C. Incident response contacts

  D. Desktop configuration standards

  Correct Answer: B

• Question 118:

  Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.

  Which of the following would be the FIRST step when addressing Information Security formally and consistently in this organization?

  A. Contract a third party to perform a security risk assessment

  B. Define formal roles and responsibilities for Internal audit functions

  C. Define formal roles and responsibilities for Information Security

  D. Create an executive security steering committee

  Correct Answer: C

• Question 119:

  Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN.

  The organization wants a more permanent solution to the threat to user credential compromise through phishing.

  What technical solution would BEST address this issue?

  A. Professional user education on phishing conducted by a reputable vendor

  B. Multi-factor authentication employing hard tokens

  C. Forcing password changes every 90 days

  D. Decreasing the number of employees with administrator privileges

  Correct Answer: B

• Question 120:

  As the Chief Information Security Officer, you want to ensure data shared securely, especially when shared with third parties outside the organization. What protocol provides the ability to extend the network perimeter with the use of encapsulation and encryption?

  A. File Transfer Protocol (FTP)

  B. Virtual Local Area Network (VLAN)

  C. Simple Mail Transfer Protocol

  D. Virtual Private Network (VPN)

  Correct Answer: D

  Reference: https://searchnetworking.techtarget.com/definition/virtual-private-network