EC-COUNCIL EC-COUNCIL Certifications 512-50 Questions & Answers

• Question 221:

  To get an Information Security project back on schedule, which of the following will provide the MOST help?

  A. Upper management support

  B. More frequent project milestone meetings

  C. Stakeholder support

  D. Extend work hours

  Correct Answer: A

• Question 222:

  Which one of the following BEST describes which member of the management team is accountable for the day-to-day operation of the information security program?

  A. Security administrators

  B. Security mangers

  C. Security technicians

  D. Security analysts

  Correct Answer: B

• Question 223:

  A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization. Which of the following principles does this best demonstrate?

  A. Alignment with the business

  B. Effective use of existing technologies

  C. Leveraging existing implementations

  D. Proper budget management

  Correct Answer: A

• Question 224:

  Which of the following functions evaluates patches used to close software vulnerabilities of new systems to assure compliance with policy when implementing an information security program?

  A. System testing

  B. Risk assessment

  C. Incident response

  D. Planning

  Correct Answer: A

• Question 225:

  Which of the following are the triple constraints of project management?

  A. Time, quality, and scope

  B. Cost, quality, and time

  C. Scope, time, and cost

  D. Quality, scope, and cost

  Correct Answer: C

  Reference: https://www.teamgantt.com/blog/triple-constraint-project-management#:~:text=Each%20side%20or%20point%20of,scope%2C%20time%2C%20and%20cost

• Question 226:

  A recommended method to document the respective roles of groups and individuals for a given process is to:

  A. Develop a detailed internal organization chart

  B. Develop a telephone call tree for emergency response

  C. Develop an isolinear response matrix with cost benefit analysis projections

  D. Develop a Responsible, Accountable, Consulted, Informed (RACI) chart

  Correct Answer: D

• Question 227:

  Information Security is often considered an excessive, after-the-fact cost when a project or initiative is completed. What can be done to ensure that security is addressed cost effectively?

  A. User awareness training for all employees

  B. Installation of new firewalls and intrusion detection systems

  C. Launch an internal awareness campaign

  D. Integrate security requirements into project inception

  Correct Answer: D

• Question 228:

  Which of the following represents the BEST method of ensuring security program alignment to business needs?

  A. Create a comprehensive security awareness program and provide success metrics to business units

  B. Create security consortiums, such as strategic security planning groups, that include business unit participation

  C. Ensure security implementations include business unit testing and functional validation prior to production rollout

  D. Ensure the organization has strong executive-level security representation through clear sponsorship or the creation of a CISO role

  Correct Answer: B

• Question 229:

  In effort to save your company money which of the following methods of training results in the lowest cost for the organization?

  A. Distance learning/Web seminars

  B. Formal Class

  C. One-One Training

  D. Self -Study (noncomputerized)

  Correct Answer: D

• Question 230:

  The regular review of a firewall ruleset is considered a

  A. Procedural control

  B. Organization control

  C. Technical control

  D. Management control

  Correct Answer: A