EC-COUNCIL EC-COUNCIL Certifications 512-50 Questions & Answers

• Question 231:

  Which of the following illustrates an operational control process:

  A. Classifying an information system as part of a risk assessment

  B. Installing an appropriate fire suppression system in the data center

  C. Conducting an audit of the configuration management process

  D. Establishing procurement standards for cloud vendors

  Correct Answer: B

• Question 232:

  Creating a secondary authentication process for network access would be an example of?

  A. An administrator with too much time on their hands.

  B. Putting undue time commitment on the system administrator.

  C. Supporting the concept of layered security

  D. Network segmentation.

  Correct Answer: C

• Question 233:

  You work as a project manager for TYU project. You are planning for risk mitigation. You need to quickly identify high-level risks that will need a more in-depth analysis. Which of the following activities will help you in this?

  A. Qualitative analysis

  B. Quantitative analysis

  C. Risk mitigation

  D. Estimate activity duration

  Correct Answer: A

• Question 234:

  When a critical vulnerability has been discovered on production systems and needs to be fixed immediately, what is the BEST approach for a CISO to mitigate the vulnerability under tight budget constraints?

  A. Transfer financial resources from other critical programs

  B. Take the system off line until the budget is available

  C. Deploy countermeasures and compensating controls until the budget is available

  D. Schedule an emergency meeting and request the funding to fix the issue

  Correct Answer: C

• Question 235:

  Which of the following is a term related to risk management that represents the estimated frequency at which a threat is expected to transpire?

  A. Single Loss Expectancy (SLE)

  B. Exposure Factor (EF)

  C. Annualized Rate of Occurrence (ARO)

  D. Temporal Probability (TP)

  Correct Answer: C

• Question 236:

  Dataflow diagrams are used by IT auditors to:

  A. Order data hierarchically.

  B. Highlight high-level data definitions.

  C. Graphically summarize data paths and storage processes.

  D. Portray step-by-step details of data generation.

  Correct Answer: C

• Question 237:

  At which point should the identity access management team be notified of the termination of an employee?

  A. At the end of the day once the employee is off site

  B. During the monthly review cycle

  C. Immediately so the employee account(s) can be disabled

  D. Before an audit

  Correct Answer: C

• Question 238:

  Which of the following are primary concerns for management with regard to assessing internal control objectives?

  A. Confidentiality, Availability, Integrity

  B. Compliance, Effectiveness, Efficiency

  C. Communication, Reliability, Cost

  D. Confidentiality, Compliance, Cost

  Correct Answer: B

• Question 239:

  Which of the following reports should you as an IT auditor use to check on compliance with a service level agreement's requirement for uptime?

  A. Systems logs

  B. Hardware error reports

  C. Utilization reports

  D. Availability reports

  Correct Answer: D

• Question 240:

  Which of the following tests is an IS auditor performing when a sample of programs is selected to determine if the source and object versions are the same?

  A. A substantive test of program library controls

  B. A compliance test of program library controls

  C. A compliance test of the program compiler controls

  D. A substantive test of the program compiler controls

  Correct Answer: B