EC-COUNCIL EC-COUNCIL Certifications 512-50 Questions & Answers

• Question 241:

  Which of the following is the MOST important reason to measure the effectiveness of an Information Security Management System (ISMS)?

  A. Meet regulatory compliance requirements

  B. Better understand the threats and vulnerabilities affecting the environment

  C. Better understand strengths and weaknesses of the program

  D. Meet legal requirements

  Correct Answer: C

• Question 242:

  Which of the following activities results in change requests?

  A. Preventive actions

  B. Inspection

  C. Defect repair

  D. Corrective actions

  Correct Answer: C

• Question 243:

  Which of the following activities must be completed BEFORE you can calculate risk?

  A. Determining the likelihood that vulnerable systems will be attacked by specific threats

  B. Calculating the risks to which assets are exposed in their current setting

  C. Assigning a value to each information asset

  D. Assessing the relative risk facing the organization's information assets

  Correct Answer: C

• Question 244:

  Which of the following organizations is typically in charge of validating the implementation and effectiveness of security controls?

  A. Security Administrators

  B. Internal/External Audit

  C. Risk Management

  D. Security Operations

  Correct Answer: B

• Question 245:

  Which of the following is a benefit of a risk-based approach to audit planning?

  A. Resources are allocated to the areas of the highest concern

  B. Scheduling may be performed months in advance

  C. Budgets are more likely to be met by the IT audit staff

  D. Staff will be exposed to a variety of technologies

  Correct Answer: A

• Question 246:

  An organization is required to implement background checks on all employees with access to databases containing credit card information. This is considered a security

  A. Procedural control

  B. Management control

  C. Technical control

  D. Administrative control

  Correct Answer: B

• Question 247:

  You are the Chief Information Security Officer of a large, multinational bank and you suspect there is a flaw in a two factor authentication token management process. Which of the following represents your BEST course of action?

  A. Validate that security awareness program content includes information about the potential vulnerability

  B. Conduct a thorough risk assessment against the current implementation to determine system functions

  C. Determine program ownership to implement compensating controls

  D. Send a report to executive peers and business unit owners detailing your suspicions

  Correct Answer: B

• Question 248:

  An IT auditor has recently discovered that because of a shortage of skilled operations personnel, the security administrator has agreed to work one late night shift a week as the senior computer operator. The most appropriate course of action for the IT auditor is to:

  A. Inform senior management of the risk involved.

  B. Agree to work with the security officer on these shifts as a form of preventative control.

  C. Develop a computer assisted audit technique to detect instances of abuses of the arrangement.

  D. Review the system log for each of the late night shifts to determine whether any irregular actions occurred.

  Correct Answer: A

• Question 249:

  When measuring the effectiveness of an Information Security Management System which one of the following would be MOST LIKELY used as a metric framework?

  A. ISO 27001

  B. PRINCE2

  C. ISO 27004

  D. ITILv3

  Correct Answer: C

• Question 250:

  The executive board has requested that the CISO of an organization define and Key Performance Indicators (KPI) to measure the effectiveness of the security awareness program provided to call center employees. Which of the following can be used as a KPI?

  A. Number of callers who report security issues.

  B. Number of callers who report a lack of customer service from the call center

  C. Number of successful social engineering attempts on the call center

  D. Number of callers who abandon the call before speaking with a representative

  Correct Answer: C