EC-COUNCIL EC-COUNCIL Certifications 512-50 Questions & Answers

• Question 251:

  When you develop your audit remediation plan what is the MOST important criteria?

  A. To remediate half of the findings before the next audit.

  B. To remediate all of the findings before the next audit.

  C. To validate that the cost of the remediation is less than the risk of the finding.

  D. To validate the remediation process with the auditor.

  Correct Answer: C

• Question 252:

  Many times a CISO may have to speak to the Board of Directors (BOD) about their cyber security posture. What would be the BEST choice of security metrics to present to the BOD?

  A. All vulnerabilities found on servers and desktops

  B. Only critical and high vulnerabilities on servers and desktops

  C. Only critical and high vulnerabilities that impact important production servers

  D. All vulnerabilities that impact important production servers

  Correct Answer: C

• Question 253:

  Which of the following are necessary to formulate responses to external audit findings?

  A. Internal Audit, Management, and Technical Staff

  B. Internal Audit, Budget Authority, Management

  C. Technical Staff, Budget Authority, Management

  D. Technical Staff, Internal Audit, Budget Authority

  Correct Answer: C

• Question 254:

  The MOST common method to get an unbiased measurement of the effectiveness of an Information Security Management System (ISMS) is to

  A. assign the responsibility to the information security team.

  B. assign the responsibility to the team responsible for the management of the controls.

  C. create operational reports on the effectiveness of the controls.

  D. perform an independent audit of the security controls.

  Correct Answer: D

• Question 255:

  Your IT auditor is reviewing significant events from the previous year and has identified some procedural oversights. Which of the following would be the MOST concerning?

  A. Lack of notification to the public of disclosure of confidential information.

  B. Lack of periodic examination of access rights

  C. Failure to notify police of an attempted intrusion

  D. Lack of reporting of a successful denial of service attack on the network.

  Correct Answer: A

• Question 256:

  How often should an environment be monitored for cyber threats, risks, and exposures?

  A. Weekly

  B. Monthly

  C. Quarterly

  D. Daily

  Correct Answer: D

• Question 257:

  Assigning the role and responsibility of Information Assurance to a dedicated and independent security group is an example of:

  A. Detective Controls

  B. Proactive Controls

  C. Preemptive Controls

  D. Organizational Controls

  Correct Answer: D

• Question 258:

  The remediation of a specific audit finding is deemed too expensive and will not be implemented. Which of the following is a TRUE statement?

  A. The asset is more expensive than the remediation

  B. The audit finding is incorrect

  C. The asset being protected is less valuable than the remediation costs

  D. The remediation costs are irrelevant; it must be implemented regardless of cost.

  Correct Answer: C

• Question 259:

  Step-by-step procedures to regain normalcy in the event of a major earthquake is PRIMARILY covered by which of the following plans?

  A. Incident response plan

  B. Business Continuity plan

  C. Disaster recovery plan

  D. Damage control plan

  Correct Answer: C

• Question 260:

  IT control objectives are useful to IT auditors as they provide the basis for understanding the:

  A. Desired results or purpose of implementing specific control procedures.

  B. The audit control checklist.

  C. Techniques for securing information.

  D. Security policy

  Correct Answer: A