EC-COUNCIL EC-COUNCIL Certifications 512-50 Questions & Answers

• Question 321:

  When briefing senior management on the creation of a governance process, the MOST important aspect should be:

  A. information security metrics.

  B. knowledge required to analyze each issue.

  C. baseline against which metrics are evaluated.

  D. linkage to business area objectives.

  Correct Answer: D

• Question 322:

  What is the BEST way to achieve on-going compliance monitoring in an organization?

  A. Only check compliance right before the auditors are scheduled to arrive onsite.

  B. Outsource compliance to a 3rd party vendor and let them manage the program.

  C. Have Compliance and Information Security partner to correct issues as they arise.

  D. Have Compliance direct Information Security to fix issues after the auditors report.

  Correct Answer: C

• Question 323:

  Which of the following is considered the MOST effective tool against social engineering?

  A. Anti-phishing tools

  B. Anti-malware tools

  C. Effective Security Vulnerability Management Program

  D. Effective Security awareness program

  Correct Answer: D

• Question 324:

  Risk is defined as:

  A. Threat times vulnerability divided by control

  B. Advisory plus capability plus vulnerability

  C. Asset loss times likelihood of event

  D. Quantitative plus qualitative impact

  Correct Answer: A

• Question 325:

  The Information Security Management program MUST protect:

  A. all organizational assets

  B. critical business processes and /or revenue streams

  C. intellectual property released into the public domain

  D. against distributed denial of service attacks

  Correct Answer: B

• Question 326:

  Regulatory requirements typically force organizations to implement

  A. Mandatory controls

  B. Discretionary controls

  C. Optional controls

  D. Financial controls

  Correct Answer: A

• Question 327:

  Which of the following is MOST likely to be discretionary?

  A. Policies

  B. Procedures

  C. Guidelines

  D. Standards

  Correct Answer: C

• Question 328:

  The single most important consideration to make when developing your security program, policies, and processes is:

  A. Budgeting for unforeseen data compromises

  B. Streamlining for efficiency

  C. Alignment with the business

  D. Establishing your authority as the Security Executive

  Correct Answer: C

• Question 329:

  When creating a vulnerability scan schedule, who is the MOST critical person to communicate with in order to ensure impact of the scan is minimized?

  A. The asset owner

  B. The asset manager

  C. The data custodian

  D. The project manager

  Correct Answer: A

• Question 330:

  What is a difference from the list below between quantitative and qualitative Risk Assessment?

  A. Quantitative risk assessments result in an exact number (in monetary terms)

  B. Qualitative risk assessments result in a quantitative assessment (high, medium, low, red, yellow, green)

  C. Qualitative risk assessments map to business objectives

  D. Quantitative risk assessments result in a quantitative assessment (high, medium, low, red, yellow, green)

  Correct Answer: A