EC-COUNCIL EC-COUNCIL Certifications 512-50 Questions & Answers

• Question 301:

  A Chief Information Security Officer received a list of high, medium, and low impact audit findings. Which of the following represents the BEST course of action?

  A. If the findings impact regulatory compliance, try to apply remediation that will address the most findings for the least cost.

  B. If the findings do not impact regulatory compliance, remediate only the high and medium risk findings.

  C. If the findings impact regulatory compliance, remediate the high findings as quickly as possible.

  D. If the findings do not impact regulatory compliance, review current security controls.

  Correct Answer: C

• Question 302:

  Which of the following represents the BEST reason for an organization to use the Control Objectives for Information and Related Technology (COBIT) as an Information Technology (IT) framework?

  A. It allows executives to more effectively monitor IT implementation costs

  B. Implementation of it eases an organization's auditing and compliance burden

  C. Information Security (IS) procedures often require augmentation with other standards

  D. It provides for a consistent and repeatable staffing model for technology organizations

  Correct Answer: B

• Question 303:

  Which of the following is the MOST effective way to measure the effectiveness of security controls on a perimeter network?

  A. Perform a vulnerability scan of the network

  B. External penetration testing by a qualified third party

  C. Internal Firewall ruleset reviews

  D. Implement network intrusion prevention systems

  Correct Answer: B

• Question 304:

  Which is the BEST solution to monitor, measure, and report changes to critical data in a system?

  A. Application logs

  B. File integrity monitoring

  C. SNMP traps

  D. Syslog

  Correct Answer: B

• Question 305:

  When a CISO considers delaying or not remediating system vulnerabilities which of the following are MOST important to take into account?

  A. Threat Level, Risk of Compromise, and Consequences of Compromise

  B. Risk Avoidance, Threat Level, and Consequences of Compromise

  C. Risk Transfer, Reputational Impact, and Consequences of Compromise

  D. Reputational Impact, Financial Impact, and Risk of Compromise

  Correct Answer: A

• Question 306:

  Which of the following is a fundamental component of an audit record?

  A. Date and time of the event

  B. Failure of the event

  C. Originating IP-Address

  D. Authentication type

  Correct Answer: A

• Question 307:

  Which of the following BEST describes an international standard framework that is based on the security model Information Technology-Code of Practice for Information Security Management?

  A. International Organization for Standardization 27001

  B. National Institute of Standards and Technology Special Publication SP 800-12

  C. Request For Comment 2196

  D. National Institute of Standards and Technology Special Publication SP 800-26

  Correct Answer: A

• Question 308:

  Which of the following activities is the MAIN purpose of the risk assessment process?

  A. Creating an inventory of information assets

  B. Classifying and organizing information assets into meaningful groups

  C. Assigning value to each information asset

  D. Calculating the risks to which assets are exposed in their current setting

  Correct Answer: D

• Question 309:

  When would it be more desirable to develop a set of decentralized security policies and procedures within an enterprise environment?

  A. When there is a need to develop a more unified incident response capability.

  B. When the enterprise is made up of many business units with diverse business activities, risks profiles and regulatory requirements.

  C. When there is a variety of technologies deployed in the infrastructure.

  D. When it results in an overall lower cost of operating the security program.

  Correct Answer: B

• Question 310:

  The FIRST step in establishing a security governance program is to?

  A. Conduct a risk assessment.

  B. Obtain senior level sponsorship.

  C. Conduct a workshop for all end users.

  D. Prepare a security budget.

  Correct Answer: B