EC-COUNCIL EC-COUNCIL Certifications 712-50 Questions & Answers

• Question 71:

  Which of the following is a primary method of applying consistent configurations to IT systems?

  A. Audits

  B. Administration

  C. Patching

  D. Templates

  Correct Answer: D

  Templates provide a standardized and efficient way to apply consistent configurations to IT systems. A template is a pre-defined configuration or set of settings that can be applied to multiple systems or devices. By using templates, organizations can ensure that systems are configured consistently according to best practices and security requirements.

• Question 72:

  The network administrator wants to strengthen physical security in the organization. Specifically, to implement a solution stopping people from entering certain restricted zones without proper credentials. Which of following physical security measures should the administrator use?

  A. Video surveillance

  B. Mantrap

  C. Bollards

  D. Fence

  Correct Answer: B

• Question 73:

  Which of the following is the MOST logical method of deploying security controls within an organization?

  A. Obtain funding for all desired controls and then create project plans for implementation

  B. Apply the simpler controls as quickly as possible and use a risk-based approach for the more difficult and costly controls

  C. Apply the least costly controls to demonstrate positive program activity

  D. Obtain business unit buy-in through close communication and coordination

  Correct Answer: D

• Question 74:

  A CISO has implemented a risk management capability within the security portfolio. Which of the following terms best describes this functionality?

  A. Service

  B. Program

  C. Portfolio

  D. Cost center

  Correct Answer: B

• Question 75:

  Using the Transport Layer Security (TLS) protocol enables a client in a network to be:

  A. Provided with a digital signature

  B. Assured of the server's identity

  C. Identified by a network

  D. Registered by the server

  Correct Answer: B

  Reference: https://ukdiss.com/examples/tls.php

• Question 76:

  If a competitor wants to cause damage to your organization, steal critical secrets, or put you out of business, they just have to find a job opening, prepare someone to pass the interview, have that person hired, and they will be in the organization. How would you prevent such type of attacks?

  A. Conduct thorough background checks before you engage them

  B. Hire the people through third-party job agencies who will vet them for you

  C. Investigate their social networking profiles

  D. It is impossible to block these attacks

  Correct Answer: A

• Question 77:

  A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization. Which of the following principles does this best demonstrate?

  A. Effective use of existing technologies

  B. Create a comprehensive security awareness program and provide success metrics to business units

  C. Proper budget management

  D. Leveraging existing implementations

  Correct Answer: D

  By conducting an analysis of the IT infrastructure, the CISO aims to leverage existing implementations, meaning they want to maximize the use and effectiveness of the organization's current security solutions. This approach recognizes the value of utilizing the systems and technologies that are already in place rather than completely replacing or discarding them. It allows for cost savings, optimization of resources, and minimizing disruption to the overall IT environment

• Question 78:

  Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda. From an Information Security Leadership perspective, which of the following is a MAJOR concern about the CISO's approach to security?

  A. Compliance centric agenda

  B. IT security centric agenda

  C. Lack of risk management process

  D. Lack of sponsorship from executive management

  Correct Answer: D

• Question 79:

  Smith, the project manager for a larger multi-location firm, is leading a software project team that has 18 members, 5 of which are assigned to testing. Due to recent recommendations by an organizational quality audit team, the project manager is convinced to add a quality professional to lead to test team at additional cost to the project.

  The project manager is aware of the importance of communication for the success of the project and takes the step of introducing additional communication channels, making it more complex, in order to assure quality levels of the project. What will be the first project management document that Smith should change in order to accommodate additional communication channels?

  A. WBS document

  B. Scope statement

  C. Change control document

  D. Risk management plan

  Correct Answer: A

• Question 80:

  If the result of an NPV is positive, then the project should be selected. The net present value shows the present value of the project, based on the decisions taken for its selection. What is the net present value equal to?

  A. Net profit per capita income

  B. Total investment Discounted cash

  C. Average profit Annual investment

  D. Initial investment Future value

  Correct Answer: B

  The net present value (NPV) is equal to option B: Total investment - Discounted cash.