EC-COUNCIL EC-COUNCIL Certifications 712-50 Questions & Answers

• Question 361:

  Information security policies should be reviewed _____________________.

  A. by the internal audit semiannually

  B. by the CISO when new systems are brought online

  C. by the Incident Response team after an audit

  D. by stakeholders at least annually

  Correct Answer: D

• Question 362:

  An organization is required to implement background checks on all employees with access to databases containing credit card information. This is considered a security___________.

  A. Technical control

  B. Management control

  C. Procedural control

  D. Administrative control

  Correct Answer: D

  Administrative control, Administrative controls refer to the policies, procedures, and practices implemented by an organization to manage and mitigate risks. Background checks are typically considered an administrative control as they involve implementing specific measures and processes to verify the credentials and background of individuals before granting them access to sensitive information or systems.

• Question 363:

  Dataflow diagrams are used by IT auditors to:

  A. Graphically summarize data paths and storage processes.

  B. Order data hierarchically

  C. Highlight high-level data definitions

  D. Portray step-by-step details of data generation.

  Correct Answer: A

• Question 364:

  When measuring the effectiveness of an Information Security Management System which one of the following would be MOST LIKELY used as a metric framework?

  A. ISO 27001

  B. ISO 27004

  C. PRINCE2

  D. ITILv3

  Correct Answer: B

• Question 365:

  The purpose of NIST SP 800-53 as part of the NIST System Certification and Accreditation Project is to establish a set of standardized, minimum security controls for IT systems addressing low, moderate, and high levels of concern for:

  A. Integrity and Availability

  B. Assurance, Compliance and Availability

  C. International Compliance

  D. Confidentiality, Integrity and Availability

  Correct Answer: D

• Question 366:

  The Information Security Management program MUST protect:

  A. Audit schedules and findings

  B. Intellectual property released into the public domain

  C. all organizational assets

  D. critical business processes and revenue streams

  Correct Answer: C

• Question 367:

  Which of the following best represents a calculation for Annual Loss Expectancy (ALE)?

  A. Value of the asset multiplied by the loss expectancy

  B. Replacement cost multiplied by the single loss expectancy

  C. Single loss expectancy multiplied by the annual rate of occurrence

  D. Total loss expectancy multiplied by the total loss frequency

  Correct Answer: C

• Question 368:

  Your IT auditor is reviewing significant events from the previous year and has identified some procedural oversights.

  Which of the following would be the MOST concerning?

  A. Failure to notify police of an attempted intrusion

  B. Lack of reporting of a successful denial of service attack on the network.

  C. Lack of periodic examination of access rights

  D. Lack of notification to the public of disclosure of confidential information

  Correct Answer: D

• Question 369:

  When would it be more desirable to develop a set of decentralized security policies and procedures within an enterprise environment?

  A. When there is a variety of technologies deployed in the infrastructure.

  B. When it results in an overall lower cost of operating the security program.

  C. When there is a need to develop a more unified incident response capability.

  D. When the enterprise is made up of many business units with diverse business activities, risks profiles and regulatory requirements.

  Correct Answer: D

• Question 370:

  Risk that remains after risk mitigation is known as_____________.

  A. Accepted risk

  B. Residual risk

  C. Non-tolerated risk

  D. Persistent risk

  Correct Answer: B