EC-COUNCIL EC-COUNCIL Certifications 712-50 Questions & Answers

• Question 41:

  As the CISO, you have been tasked with the execution of the company's key management program. You MUST ensure the integrity of encryption keys at the point of generation. Which principal of encryption key control will ensure no single individual can constitute or re-constitute a key?

  A. Dual Control

  B. Separation of Duties

  C. Split Knowledge

  D. Least Privilege

  Correct Answer: C

• Question 42:

  What is one key difference between Capital expenditures and Operating expenditures?

  A. Operating expense cannot be written off while Capital expense can

  B. Operating expenses can be depreciated over time and Capital expenses cannot

  C. Capital expenses cannot include salaries and Operating expenses can

  D. Capital expenditures allow for the cost to be depreciated over time and Operating does not

  Correct Answer: D

• Question 43:

  As the Chief Information Security Officer, you want to ensure data shared securely, especially when shared with third parties outside the organization. What protocol provides the ability to extend the network perimeter with the use of encapsulation and encryption?

  A. File Transfer Protocol (FTP)

  B. Virtual Local Area Network (VLAN)

  C. Simple Mail Transfer Protocol

  D. Virtual Private Network (VPN)

  Correct Answer: D

  Reference: https://searchnetworking.techtarget.com/definition/virtual-private-network

• Question 44:

  Michael starts a new job and discovers that he has unnecessary access to a variety of systems. Which of the following best describes the problem he has encountered?

  A. Rights collision

  B. Excessive privileges

  C. Privilege creep

  D. Least privileges

  Correct Answer: B

• Question 45:

  Which of the following best describes the sensors designed to project and detect a light beam across an area?

  A. Smoke

  B. Thermal

  C. Air-aspirating

  D. Photo electric

  Correct Answer: D

  Reference: https://en.wikipedia.org/wiki/Photoelectric_sensor

• Question 46:

  Which of the following best describes an access control process that confirms the identity of the entity seeking access to a logical or physical area?

  A. Identification

  B. Authorization

  C. Authentication

  D. Accountability

  Correct Answer: C

• Question 47:

  As the Chief Information Security Officer, you are performing an assessment of security posture to understand what your Defense-in-Depth capabilities are. Which network security technology examines network traffic flows to detect and actively stop vulnerability exploits and attacks?

  A. Gigamon

  B. Intrusion Prevention System

  C. Port Security

  D. Anti-virus

  Correct Answer: B

  Reference: https://searchsecurity.techtarget.com/definition/intrusion-prevention

• Question 48:

  Which of the following terms is used to describe countermeasures implemented to minimize risks to physical property, information, and computing systems?

  A. Security frameworks

  B. Security policies

  C. Security awareness

  D. Security controls

  Correct Answer: D

  Reference: https://www.ibm.com/cloud/learn/security-controls

• Question 49:

  Which of the following is the MOST important reason for performing assessments of the security portfolio?

  A. To assure that the portfolio is aligned to the needs of the broader organization

  B. To create executive support of the portfolio

  C. To discover new technologies and processes for implementation within the portfolio

  D. To provide independent 3rd party reviews of security effectiveness

  Correct Answer: A

• Question 50:

  What are the three stages of an identity and access management system?

  A. Authentication, Authorize, Validation

  B. Provision, Administration, Enforcement

  C. Administration, Validation, Protect

  D. Provision, Administration, Authentication

  Correct Answer: A

  Reference: https://digitalguardian.com/blog/what-identity-and-access-management-iam