EC-Council 712-50 Practice Test 2021

NEW QUESTION 1
Which of the following best represents a calculation for Annual Loss Expectancy (ALE)?

• A. Single loss expectancy multiplied by the annual rate of occurrence
• B. Total loss expectancy multiplied by the total loss frequency
• C. Value of the asset multiplied by the loss expectancy
• D. Replacement cost multiplied by the single loss expectancy

Answer: A

NEW QUESTION 2
Risk that remains after risk mitigation is known as

• A. Persistent risk
• B. Residual risk
• C. Accepted risk
• D. Non-tolerated risk

Answer: B

NEW QUESTION 3
You are just hired as the new CISO and are being briefed on all the Information Security projects that your section has on going. You discover that most projects are behind schedule and over budget.
Using the best business practices for project management you determine that the project correctly aligns with the company goals and the scope of the project is correct. What is the NEXT step?

• A. Review time schedules
• B. Verify budget
• C. Verify resources
• D. Verify constraints

Answer: C

NEW QUESTION 4
Which of the following is the MOST important benefit of an effective security governance process?

• A. Reduction of liability and overall risk to the organization
• B. Better vendor management
• C. Reduction of security breaches
• D. Senior management participation in the incident response process

Answer: A

NEW QUESTION 5
What is the relationship between information protection and regulatory compliance?

• A. That all information in an organization must be protected equally.
• B. The information required to be protected by regulatory mandate does not have to be identified in the organizations data classification policy.
• C. That the protection of some information such as National ID information is mandated by regulation and other information such as trade secrets are protected based on business need.
• D. There is no relationship between the two.

Answer: C

NEW QUESTION 6
When working in the Payment Card Industry (PCI), how often should security logs be review to comply with the standards?

• A. Daily
• B. Hourly
• C. Weekly
• D. Monthly

Answer: A

NEW QUESTION 7
Annual Loss Expectancy is derived from the function of which two factors?

• A. Annual Rate of Occurrence and Asset Value
• B. Single Loss Expectancy and Exposure Factor
• C. Safeguard Value and Annual Rate of Occurrence
• D. Annual Rate of Occurrence and Single Loss Expectancy

Answer: D

NEW QUESTION 8
When would it be more desirable to develop a set of decentralized security policies and procedures within an enterprise environment?

• A. When there is a need to develop a more unified incident response capability.
• B. When the enterprise is made up of many business units with diverse business activities, risks profiles and regulatory requirements.
• C. When there is a variety of technologies deployed in the infrastructure.
• D. When it results in an overall lower cost of operating the security program.

Answer: B

NEW QUESTION 9
What is the first thing that needs to be completed in order to create a security program for your organization?

• A. Risk assessment
• B. Security program budget
• C. Business continuity plan
• D. Compliance and regulatory analysis

Answer: A

NEW QUESTION 10
Security related breaches are assessed and contained through which of the following?

• A. The IT support team.
• B. A forensic analysis.
• C. Incident response
• D. Physical security team.

Answer: C

NEW QUESTION 11
The ability to demand the implementation and management of security controls on third parties providing services to an organization is

• A. Security Governance
• B. Compliance management
• C. Vendor management
• D. Disaster recovery

Answer: C

NEW QUESTION 12
An organization has a stated requirement to block certain traffic on networks. The
implementation of controls will disrupt a manufacturing process and cause unacceptable delays, resulting in sever revenue disruptions. Which of the following is MOST likely to be responsible for accepting the risk until mitigating controls can be implemented?

• A. The CISO
• B. Audit and Compliance
• C. The CFO
• D. The business owner

Answer: D

NEW QUESTION 13
When you develop your audit remediation plan what is the MOST important criteria?

• A. To remediate half of the findings before the next audit.
• B. To remediate all of the findings before the next audit.
• C. To validate that the cost of the remediation is less than the risk of the finding.
• D. To validate the remediation process with the auditor.

Answer: C

NEW QUESTION 14
When measuring the effectiveness of an Information Security Management System which one of the following would be MOST LIKELY used as a metric framework?

• A. ISO 27001
• B. PRINCE2
• C. ISO 27004
• D. ITILv3

Answer: C

NEW QUESTION 15
According to ISO 27001, of the steps for establishing an Information Security Governance program listed below, which comes first?

• A. Identify threats, risks, impacts and vulnerabilities
• B. Decide how to manage risk
• C. Define the budget of the Information Security Management System
• D. Define Information Security Policy

Answer: D

NEW QUESTION 16
SQL injection is a very popular and successful injection attack method. Identify the basic SQL injection text:

Answer:

NEW QUESTION 17
This occurs when the quantity or quality of project deliverables is expanded from the original project plan.

• A. Scope creep
• B. Deadline extension
• C. Scope modification
• D. Deliverable expansion

Answer: A

NEW QUESTION 18
What is the term describing the act of inspecting all real-time Internet traffic (i.e., packets) traversing a major Internet backbone without introducing any apparent latency?

• A. Traffic Analysis
• B. Deep-Packet inspection
• C. Packet sampling
• D. Heuristic analysis

Answer: B

NEW QUESTION 19
Within an organization’s vulnerability management program, who has the responsibility to implement remediation actions?

• A. Security officer
• B. Data owner
• C. Vulnerability engineer
• D. System administrator

Answer: D