EC-COUNCIL EC-COUNCIL Certifications 712-50 Questions & Answers

• Question 421:

  A method to transfer risk is to______________.

  A. Implement redundancy

  B. Move operations to another region

  C. Align to business operations

  D. Purchase breach insurance

  Correct Answer: D

• Question 422:

  An organization licenses and uses personal information for business operations, and a server containing that information has been compromised.

  What kind of law would require notifying the owner or licensee of this incident?

  A. Consumer right disclosure

  B. Data breach disclosure

  C. Special circumstance disclosure

  D. Security incident disclosure

  Correct Answer: B

• Question 423:

  A security manager regularly checks work areas after business hours for security violations; such as unsecured files or unattended computers with active sessions.

  This activity BEST demonstrates what part of a security program?

  A. Compliance management

  B. Audit validation

  C. Physical control testing

  D. Security awareness training

  Correct Answer: A

• Question 424:

  Which of the following is the MAIN reason to follow a formal risk management process in an organization that hosts and uses privately identifiable information (PII) as part of their business models and processes?

  A. Need to comply with breach disclosure laws

  B. Fiduciary responsibility to safeguard credit information

  C. Need to transfer the risk associated with hosting PII data

  D. Need to better understand the risk associated with using PII data

  Correct Answer: D

• Question 425:

  Which of the following is the MOST important benefit of an effective security governance process?

  A. Senior management participation in the incident response process

  B. Better vendor management

  C. Reduction of security breaches

  D. Reduction of liability and overall risk to the organization

  Correct Answer: D

• Question 426:

  A global retail organization is looking to implement a consistent Disaster Recovery and Business Continuity Process across all of its business units.

  Which of the following standards and guidelines can BEST address this organization's need?

  A. International Organization for Standardizations ?22301 (ISO-22301)

  B. Information Technology Infrastructure Library (ITIL)

  C. Payment Card Industry Data Security Standards (PCI-DSS)

  D. International Organization for Standardizations ?27005 (ISO-27005)

  Correct Answer: A

• Question 427:

  When briefing senior management on the creation of a governance process, the MOST important aspect should be:

  A. knowledge required to analyze each issue

  B. information security metrics

  C. linkage to business area objectives

  D. baseline against which metrics are evaluated

  Correct Answer: C

• Question 428:

  Which of the following should be determined while defining risk management strategies?

  A. Organizational objectives and risk tolerance

  B. Enterprise disaster recovery plans

  C. Risk assessment criteria

  D. IT architecture complexity

  Correct Answer: A

• Question 429:

  When selecting a security solution with recurring maintenance costs after the first year, the CISO should:

  A. Defer selection until the market improves and cash flow is positive

  B. Implement the solution and ask for the increased operating cost budget when it is time

  C. Communicate future operating costs to the CIO/CFO and seek commitment from them to ensure the new solution's continued use

  D. Cut other essential programs to ensure the new solution's continued use

  Correct Answer: C

  Reference: https://books.google.com/books?id=kiE_EAAAQBAJandpg=PT59andlpg=PT59anddq=Communicate+future+operating+costs+to+the+CIO/CFO+and+seek+commitment+from+them+to+ensure+the+new+solution%E2%80%99s +continued+useandsource=blandots=3MNR-uuPjRandsig=ACfU3U1ibTQwVjKcrliRd3Dl-jpgY5Xlxwandhl=enandsa=Xandved=2ahUKEwiTjoDpuLv0AhU_SvEDHUvgCY4Q6AF6BAhAEAM#v=onepageandq=Communicate%20future%20operating%20costs% 20to%20the%20CIO%2FCFO%20and%20seek%20commitment%20from%20them%20to%20ensure%20the%20new%20solution%E2%80%99s%20continued%20useandf=false

• Question 430:

  What does RACI stand for?

  A. Reasonable, Actionable, Controlled, and Implemented

  B. Responsible, Actors, Consult, and Instigate

  C. Responsible, Accountable, Consulted, and Informed

  D. Review, Act, Communicate, and Inform

  Correct Answer: C

  Reference: https://www.google.com/search?q=What+does+RACI+stand+forandoq=What+does+RACI+stand+forandaqs=edge..69i57.220j0j4andsourceid=chromeandie=UTF-8