EC-COUNCIL EC-COUNCIL Certifications 512-50 Questions & Answers

• Question 211:

  You manage a newly created Security Operations Center (SOC), your team is being inundated with security alerts and don't know what to do. What is the BEST approach to handle this situation?

  A. Tell the team to do their best and respond to each alert

  B. Tune the sensors to help reduce false positives so the team can react better

  C. Request additional resources to handle the workload

  D. Tell the team to only respond to the critical and high alerts

  Correct Answer: B

• Question 212:

  Acme Inc. has engaged a third party vendor to provide 99.999% up-time for their online web presence and had them contractually agree to this service level agreement. What type of risk tolerance is Acme exhibiting? (choose the BEST answer):

  A. low risk-tolerance

  B. high risk-tolerance

  C. moderate risk-tolerance

  D. medium-high risk-tolerance

  Correct Answer: A

• Question 213:

  When entering into a third party vendor agreement for security services, at what point in the process is it BEST to understand and validate the security posture and compliance level of the vendor?

  A. At the time the security services are being performed and the vendor needs access to the network

  B. Once the agreement has been signed and the security vendor states that they will need access to the network

  C. Once the vendor is on premise and before they perform security services

  D. Prior to signing the agreement and before any security services are being performed

  Correct Answer: D

• Question 214:

  Which of the following represents the best method of ensuring business unit alignment with security program requirements?

  A. Provide clear communication of security requirements throughout the organization

  B. Demonstrate executive support with written mandates for security policy adherence

  C. Create collaborative risk management approaches within the organization

  D. Perform increased audits of security processes and procedures

  Correct Answer: C

• Question 215:

  A person in your security team calls you at night and informs you that one of your web applications is potentially under attack from a cross-site scripting vulnerability. What do you do?

  A. tell him to shut down the server

  B. tell him to call the police

  C. tell him to invoke the incident response process

  D. tell him to analyze the problem, preserve the evidence and provide a full analysis and report

  Correct Answer: C

• Question 216:

  Which of the following information may be found in table top exercises for incident response?

  A. Security budget augmentation

  B. Process improvements

  C. Real-time to remediate

  D. Security control selection

  Correct Answer: B

• Question 217:

  When selecting a security solution with reoccurring maintenance costs after the first year (choose the BEST answer):

  A. The CISO should cut other essential programs to ensure the new solution's continued use

  B. Communicate future operating costs to the CIO/CFO and seek commitment from them to ensure the new solution's continued use

  C. Defer selection until the market improves and cash flow is positive

  D. Implement the solution and ask for the increased operating cost budget when it is time

  Correct Answer: B

• Question 218:

  An example of professional unethical behavior is:

  A. Gaining access to an affiliated employee's work email account as part of an officially sanctioned internal investigation

  B. Sharing copyrighted material with other members of a professional organization where all members have legitimate access to the material

  C. Copying documents from an employer's server which you assert that you have an intellectual property claim to possess, but the company disputes

  D. Storing client lists and other sensitive corporate internal documents on a removable thumb drive

  Correct Answer: C

• Question 219:

  Which of the following are not stakeholders of IT security projects?

  A. Board of directors

  B. Third party vendors

  C. CISO

  D. Help Desk

  Correct Answer: B

• Question 220:

  Which of the following functions implements and oversees the use of controls to reduce risk when creating an information security program?

  A. Risk Assessment

  B. Incident Response

  C. Risk Management

  D. Network Security administration

  Correct Answer: C