EC-COUNCIL EC-COUNCIL Certifications 512-50 Questions & Answers

• Question 261:

  Control Objectives for Information and Related Technology (COBIT) is which of the following?

  A. An Information Security audit standard

  B. An audit guideline for certifying secure systems and controls

  C. A framework for Information Technology management and governance

  D. A set of international regulations for Information Technology governance

  Correct Answer: C

• Question 262:

  When working in the Payment Card Industry (PCI), how often should security logs be review to comply with the standards?

  A. Daily

  B. Hourly

  C. Weekly

  D. Monthly

  Correct Answer: A

• Question 263:

  An organization has implemented a change management process for all changes to the IT production environment. This change management process follows best practices and is expected to help stabilize the availability and integrity of the organization's IT environment. Which of the following can be used to measure the effectiveness of this newly implemented process:

  A. Number of change orders rejected

  B. Number and length of planned outages

  C. Number of unplanned outages

  D. Number of change orders processed

  Correct Answer: C

• Question 264:

  An information security department is required to remediate system vulnerabilities when they are discovered. Please select the three primary remediation methods that can be used on an affected system.

  A. Install software patch, Operate system, Maintain system

  B. Discover software, Remove affected software, Apply software patch

  C. Install software patch, configuration adjustment, Software Removal

  D. Software removal, install software patch, maintain system

  Correct Answer: C

• Question 265:

  The patching and monitoring of systems on a consistent schedule is required by?

  A. Local privacy laws

  B. Industry best practices

  C. Risk Management frameworks

  D. Audit best practices

  Correct Answer: C

• Question 266:

  Who is responsible for verifying that audit directives are implemented?

  A. IT Management

  B. Internal Audit

  C. IT Security

  D. BOD Audit Committee

  Correct Answer: B

  Reference: https://www.eccouncil.org/information-security-management/

• Question 267:

  In MOST organizations which group periodically reviews network intrusion detection system logs for all systems as part of their daily tasks?

  A. Internal Audit

  B. Database Administration

  C. Information Security

  D. Compliance

  Correct Answer: C

• Question 268:

  An employee successfully avoids becoming a victim of a sophisticated spear phishing attack due to knowledge gained through the corporate information security awareness program. What type of control has been effectively utilized?

  A. Management Control

  B. Technical Control

  C. Training Control

  D. Operational Control

  Correct Answer: D

• Question 269:

  Which of the following best represents a calculation for Annual Loss Expectancy (ALE)?

  A. Single loss expectancy multiplied by the annual rate of occurrence

  B. Total loss expectancy multiplied by the total loss frequency

  C. Value of the asset multiplied by the loss expectancy

  D. Replacement cost multiplied by the single loss expectancy

  Correct Answer: A

• Question 270:

  Which of the following is the MOST important goal of risk management?

  A. Identifying the risk

  B. Finding economic balance between the impact of the risk and the cost of the control

  C. Identifying the victim of any potential exploits.

  D. Assessing the impact of potential threats

  Correct Answer: B