EC-COUNCIL EC-COUNCIL Certifications 712-50 Questions & Answers

• Question 381:

  Which of the following intellectual Property components is focused on maintaining brand recognition?

  A. Trademark

  B. Research Logs

  C. Copyright

  D. Patent

  Correct Answer: A

• Question 382:

  A company wants to fill a Chief Information Security Officer position in the organization. They need to define and implement a more holistic security program.

  Which of the following qualifications and experience would be MOST desirable to find in a candidate?

  A. Industry certifications, technical knowledge and program management skills

  B. Multiple references, strong background check and industry certifications

  C. Multiple certifications, strong technical capabilities and lengthy resume

  D. College degree, audit capabilities and complex project management

  Correct Answer: A

• Question 383:

  Which of the following most commonly falls within the scope of an information security governance steering committee?

  A. Vetting information security policies

  B. Approving access to critical financial systems

  C. Interviewing candidates for information security specialist positions

  D. Developing content for security awareness programs

  Correct Answer: A

• Question 384:

  Quantitative Risk Assessments have the following advantages over qualitative risk assessments:

  A. They are subjective and can be completed more quickly

  B. They are objective and express risk / cost in approximates

  C. They are subjective and can express risk / cost in real numbers

  D. They are objective and can express risk / cost in real numbers

  Correct Answer: D

• Question 385:

  After a risk assessment is performed, a particular risk is considered to have the potential of costing the organization 1.2 Million USD. This is an example of____________.

  A. Qualitative risk analysis

  B. Risk Appetite

  C. Quantitative risk analysis

  D. Risk Tolerance

  Correct Answer: C

• Question 386:

  The PRIMARY objective for information security program development should be:

  A. Reducing the impact of the risk to the business.

  B. Establishing incident response programs.

  C. Establishing strategic alignment with business continuity requirements.

  D. Identifying and implementing the best security solutions.

  Correct Answer: A

• Question 387:

  Which of the following is considered the MOST effective tool against social engineering?

  A. Effective Security Vulnerability Management Program

  B. Anti-malware tools

  C. Effective Security awareness program

  D. Anti-phishing tools

  Correct Answer: C

• Question 388:

  When managing the security architecture for your company you must consider:

  A. Budget

  B. Security and IT Staff size

  C. Company values

  D. All of the above

  Correct Answer: D

• Question 389:

  Developing effective security controls is a balance between:

  A. Technology and Vendor Management

  B. Operations and Regulations

  C. Risk Management and Operations

  D. Corporate Culture and Job Expectations

  Correct Answer: C

• Question 390:

  The framework that helps to define a minimum standard of protection that business stakeholders must attempt to achieve is referred to as a standard of:

  A. Due Compromise

  B. Due process

  C. Due Care

  D. Due Protection

  Correct Answer: C