EC-COUNCIL EC-COUNCIL Certifications 512-50 Questions & Answers

• Question 381:

  Which of the following provides an audit framework?

  A. Control Objectives for IT (COBIT)

  B. Payment Card Industry-Data Security Standard (PCI-DSS)

  C. International Organization Standard (ISO) 27002

  D. National Institute of Standards and Technology (NIST) SP 800-30

  Correct Answer: A

• Question 382:

  The exposure factor of a threat to your organization is defined by?

  A. Asset value times exposure factor

  B. Annual rate of occurrence

  C. Annual loss expectancy minus current cost of controls

  D. Percentage of loss experienced due to a realized threat event

  Correct Answer: D

• Question 383:

  A method to transfer risk is to:

  A. Implement redundancy

  B. move operations to another region

  C. purchase breach insurance

  D. Alignment with business operations

  Correct Answer: C

• Question 384:

  An organization's Information Security Policy is of MOST importance because

  A. it communicates management's commitment to protecting information resources

  B. it is formally acknowledged by all employees and vendors

  C. it defines a process to meet compliance requirements

  D. it establishes a framework to protect confidential information

  Correct Answer: A

• Question 385:

  Which of the following is of MOST importance when security leaders of an organization are required to align security to influence the culture of an organization?

  A. Poses a strong technical background

  B. Understand all regulations affecting the organization

  C. Understand the business goals of the organization

  D. Poses a strong auditing background

  Correct Answer: C

• Question 386:

  Which of the following is a critical operational component of an Incident Response Program (IRP)?

  A. Weekly program budget reviews to ensure the percentage of program funding remains constant.

  B. Annual review of program charters, policies, procedures and organizational agreements.

  C. Daily monitoring of vulnerability advisories relating to your organization's deployed technologies.

  D. Monthly program tests to ensure resource allocation is sufficient for supporting the needs of the organization

  Correct Answer: C

• Question 387:

  Which of the following is the MOST important for a CISO to understand when identifying threats?

  A. How vulnerabilities can potentially be exploited in systems that impact the organization

  B. How the security operations team will behave to reported incidents

  C. How the firewall and other security devices are configured to prevent attacks

  D. How the incident management team prepares to handle an attack

  Correct Answer: A

• Question 388:

  One of the MAIN goals of a Business Continuity Plan is to

  A. Ensure all infrastructure and applications are available in the event of a disaster

  B. Allow all technical first-responders to understand their roles in the event of a disaster

  C. Provide step by step plans to recover business processes in the event of a disaster

  D. Assign responsibilities to the technical teams responsible for the recovery of all data.

  Correct Answer: C

• Question 389:

  An organization information security policy serves to

  A. establish budgetary input in order to meet compliance requirements

  B. establish acceptable systems and user behavior

  C. define security configurations for systems

  D. define relationships with external law enforcement agencies

  Correct Answer: B

• Question 390:

  A global retail company is creating a new compliance management process. Which of the following regulations is of MOST importance to be tracked and managed by this process?

  A. Information Technology Infrastructure Library (ITIL)

  B. International Organization for Standardization (ISO) standards

  C. Payment Card Industry Data Security Standards (PCI-DSS)

  D. National Institute for Standards and Technology (NIST) standard

  Correct Answer: C