EC-COUNCIL EC-COUNCIL Certifications 512-50 Questions & Answers

• Question 351:

  You have a system with 2 identified risks. You determine the probability of one risk occurring is higher than the

  A. Controlled mitigation effort

  B. Risk impact comparison

  C. Relative likelihood of event

  D. Comparative threat analysis

  Correct Answer: C

• Question 352:

  When dealing with a risk management process, asset classification is important because it will impact the overall:

  A. Threat identification

  B. Risk monitoring

  C. Risk treatment

  D. Risk tolerance

  Correct Answer: C

• Question 353:

  Which of the following are the MOST important factors for proactively determining system vulnerabilities?

  A. Subscribe to vendor mailing list to get notification of system vulnerabilities

  B. Deploy Intrusion Detection System (IDS) and install anti-virus on systems

  C. Configure firewall, perimeter router and Intrusion Prevention System (IPS)

  D. Conduct security testing, vulnerability scanning, and penetration testing

  Correct Answer: D

• Question 354:

  In accordance with best practices and international standards, how often is security awareness training provided to employees of an organization?

  A. High risk environments 6 months, low risk environments 12 months

  B. Every 12 months

  C. Every 18 months

  D. Every six months

  Correct Answer: B

• Question 355:

  Payment Card Industry (PCI) compliance requirements are based on what criteria?

  A. The types of cardholder data retained

  B. The duration card holder data is retained

  C. The size of the organization processing credit card data

  D. The number of transactions performed per year by an organization

  Correct Answer: D

• Question 356:

  When managing the security architecture for your company you must consider:

  A. Security and IT Staff size

  B. Company Values

  C. Budget

  D. All of the above

  Correct Answer: D

• Question 357:

  What should an organization do to ensure that they have a sound Business Continuity (BC) Plan?

  A. Test every three years to ensure that things work as planned

  B. Conduct periodic tabletop exercises to refine the BC plan

  C. Outsource the creation and execution of the BC plan to a third party vendor

  D. Conduct a Disaster Recovery (DR) exercise every year to test the plan

  Correct Answer: B

• Question 358:

  An organization has defined a set of standard security controls. This organization has also defined the circumstances and conditions in which they must be applied. What is the NEXT logical step in applying the controls in the organization?

  A. Determine the risk tolerance

  B. Perform an asset classification

  C. Create an architecture gap analysis

  D. Analyze existing controls on systems

  Correct Answer: B

• Question 359:

  A security manager regularly checks work areas after business hours for security violations; such as unsecured files or unattended computers with active sessions. This activity BEST demonstrates what part of a security program?

  A. Audit validation

  B. Physical control testing

  C. Compliance management

  D. Security awareness training

  Correct Answer: C

• Question 360:

  Which of the following should be determined while defining risk management strategies?

  A. Organizational objectives and risk tolerance

  B. Risk assessment criteria

  C. IT architecture complexity

  D. Enterprise disaster recovery plans

  Correct Answer: A