EC-COUNCIL EC-COUNCIL Certifications 712-50 Questions & Answers

• Question 21:

  When reviewing a Solution as a Service (SaaS) provider's security health and posture, which key document should you review?

  A. SaaS provider's website certifications and representations (certs and reps)

  B. SOC-2 Report

  C. Metasploit Audit Report

  D. Statement from SaaS provider attesting their ability to secure your data

  Correct Answer: B

  Reference: https://www.threatstack.com/blog/how-saas-companies-can-build-a-compliance-roadmap

• Question 22:

  As the Risk Manager of an organization, you are task with managing vendor risk assessments. During the assessment, you identified that the vendor is engaged with high profiled clients, and bad publicity can jeopardize your own brand. Which is the BEST type of risk that defines this event?

  A. Compliance Risk

  B. Reputation Risk

  C. Operational Risk

  D. Strategic Risk

  Correct Answer: B

• Question 23:

  What is a Statement of Objectives (SOA)?

  A. A section of a contract that defines tasks to be performed under said contract

  B. An outline of what the military will do during war

  C. A document that outlines specific desired outcomes as part of a request for proposal

  D. Business guidance provided by the CEO

  Correct Answer: C

• Question 24:

  When obtaining new products and services, why is it essential to collaborate with lawyers, IT security professionals, privacy professionals, security engineers, suppliers, and others?

  A. This makes sure the files you exchange aren't unnecessarily flagged by the Data Loss Prevention (DLP) system

  B. Contracting rules typically require you to have conversations with two or more groups

  C. Discussing decisions with a very large group of people always provides a better outcome

  D. It helps to avoid regulatory or internal compliance issues

  Correct Answer: D

  Reference: https://www.eccouncil.org/wp-content/uploads/2016/07/NICE-2.0-and-EC-Council-Cert-Mapping.pdf

• Question 25:

  An organization recently acquired a Data Loss Prevention (DLP) solution, and two months after the implementation, it was found that sensitive data was posted to numerous Dark Web sites. The DLP application was checked, and there are no apparent malfunctions and no errors.

  What is the MOST likely reason why the sensitive data was posted?

  A. The DLP Solution was not integrated with mobile device anti-malware

  B. Data classification was not properly performed on the assets

  C. The sensitive data was not encrypted while at rest

  D. A risk assessment was not performed after purchasing the DLP solution

  Correct Answer: B

• Question 26:

  The main purpose of the SOC is:

  A. An organization which provides Tier 1 support for technology issues and provides escalation when needed

  B. A distributed organization which provides intelligence to governments and private sectors on cyber-criminal activities

  C. The coordination of personnel, processes and technology to identify information security events and provide timely response and remediation

  D. A device which consolidates event logs and provides real-time analysis of security alerts generated by applications and network hardware

  Correct Answer: C

  Reference: https://www.eccouncil.org/what-is-soc/

• Question 27:

  ABC Limited has recently suffered a security breach with customers' social security number available on the dark web for sale. The CISO, during the time of the incident, has been fired, and you have been hired as the replacement. The analysis of the breach found that the absence of an insider threat program, lack of least privilege policy, and weak access control was to blame. You would like to implement key performance indicators to mitigate the risk.

  Which metric would meet the requirement?

  A. Number of times third parties access critical information systems

  B. Number of systems with known vulnerabilities

  C. Number of users with elevated privileges

  D. Number of websites with weak or misconfigured certificates

  Correct Answer: C

• Question 28:

  When information security falls under the Chief Information Officer (CIO), what is their MOST essential role?

  A. Oversees the organization's day-to-day operations, creating the policies and strategies that govern operations

  B. Enlisting support from key executives the information security program budget and policies

  C. Charged with developing and implementing policies designed to protect employees and customers' data from unauthorized access

  D. Responsible for the success or failure of the IT organization and setting strategic direction

  Correct Answer: D

  Reference: https://www.investopedia.com/terms/c/cio.asp

• Question 29:

  Which of the following would negatively impact a log analysis of a multinational organization?

  A. Centralized log management

  B. Encrypted log files in transit

  C. Each node set to local time

  D. Log aggregation agent each node

  Correct Answer: C

• Question 30:

  Which of the following statements below regarding Key Performance indicators (KPIs) are true?

  A. Development of KPI's are most useful when done independently

  B. They are a strictly quantitative measure of success

  C. They should be standard throughout the organization versus domain-specific so they are more easily correlated

  D. They are a strictly qualitative measure of success

  Correct Answer: C