[Aug 09, 2022] Get Latest and 100% Accurate 712-50 Exam Questions

Maximum Grades By Making ready With 712-50 Dumps

NEW QUESTION 20
The mean time to patch, number of virus outbreaks prevented, and number of vulnerabilities mitigated are examples of what type of performance metrics?

• A. Compliance metrics
• B. Operational metrics
• C. Risk metrics
• D. Management metrics

Answer: B

 

NEW QUESTION 21
SCENARIO: Critical servers show signs of erratic behavior within your organization's intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team.
During initial investigation, the team suspects criminal activity but cannot initially prove or disprove illegal actions. What is the MOST critical aspect of the team's activities?

• A. Preservation of information
• B. Regular communication of incident status to executives
• C. Determination of the attack source
• D. Eradication of malware and system restoration

Answer: A

 

NEW QUESTION 22
Scenario: Critical servers show signs of erratic behavior within your organization's intranet. Initial information indicates the systems are under attack from an outside entity. As the Chief Information Security Officer (CISO), you decide to deploy the Incident Response Team (IRT) to determine the details of this incident and take action according to the information available to the team.
What phase of the response provides measures to reduce the likelihood of an incident from recurring?

• A. Response
• B. Recovery
• C. Follow-up
• D. Investigation

Answer: C

Explanation:
Explanation

 

NEW QUESTION 23
What organizational structure combines the functional and project structures to create a hybrid of the two?

• A. Traditional
• B. Matrix
• C. Project
• D. Composite

Answer: B

 

NEW QUESTION 24
An organization is required to implement background checks on all employees with access to databases containing credit card information. This is considered a security___________.

• A. Procedural control
• B. Management control
• C. Technical control
• D. Administrative control

Answer: B

Explanation:
Explanation/Reference:

 

NEW QUESTION 25
The total cost of security controls should:

• A. Be greater than the value of the information resource being protected
• B. Should not matter, as long as the information resource is protected
• C. Be less than the value of the information resource being protected
• D. Be equal to the value information resource being protected

Answer: C

Explanation:
Explanation/Reference:

 

NEW QUESTION 26
Control Objectives for Information and Related Technology (COBIT) is which of the following?

• A. An Information Security audit standard
• B. A set of international regulations for Information Technology governance
• C. An audit guideline for certifying secure systems and controls
• D. A framework for Information Technology management and governance

Answer: D

 

NEW QUESTION 27
Which of the following is considered one of the most frequent failures in project management?

• A. Excessive personnel on project
• B. Overly restrictive management
• C. Insufficient resources
• D. Failure to meet project deadlines

Answer: D

 

NEW QUESTION 28
You have been hired as the Information System Security Officer (ISSO) for a US federal government agency. Your role is to ensure the security posture of the system is maintained. One of your tasks is to develop and maintain the system security plan (SSP) and supporting documentation.
Which of the following is NOT documented in the SSP?

• A. Type of information used in the system
• B. The results of a third-party audits and recommendations
• C. The controls in place to secure the system
• D. Name of the connected system

Answer: B

 

NEW QUESTION 29
When dealing with Security Incident Response procedures, which of the following steps come FIRST when reacting to an incident?

• A. Escalation
• B. Recovery
• C. Eradication
• D. Containment

Answer: D

 

NEW QUESTION 30
The framework that helps to define a minimum standard of protection that business stakeholders must attempt to achieve is referred to as a standard of:

• A. Due Care
• B. Due Protection
• C. Due Compromise
• D. Due process

Answer: A

Explanation:
Explanation/Reference:

 

NEW QUESTION 31
An employee successfully avoids becoming a victim of a sophisticated spear phishing attack due to knowledge gained through the corporate information security awareness program. What type of control has been effectively utilized?

• A. Technical Control
• B. Management Control
• C. Training Control
• D. Operational Control

Answer: D

 

NEW QUESTION 32
SQL injection is a very popular and successful injection attack method. Identify the basic SQL injection text:

• A. 'O 1=1 - -
• B. NOPS
• C. "DROPTABLE USERNAME"
• D. /../../../../

Answer: A

 

NEW QUESTION 33
Scenario: You are the CISO and are required to brief the C-level executive team on your information security audit for the year. During your review of the audit findings you discover that many of the controls that were put in place the previous year to correct some of the findings are not performing as needed. You have thirty days until the briefing.
To formulate a remediation plan for the non-performing controls what other document do you need to review before adjusting the controls?

• A. Annual report to shareholders
• B. Business Continuity plan
• C. Security roadmap
• D. Business Impact Analysis

Answer: D

 

NEW QUESTION 34
Which of the following international standards can be BEST used to define a Risk Management process in an organization?

• A. National Institute for Standards and Technology 800-50 (NIST 800-50)
• B. Payment Card Industry Data Security Standards (PCI-DSS)
• C. International Organization for Standardizations - 27004 (ISO-27004)
• D. International Organization for Standardizations - 27005 (ISO-27005)

Answer: D

Explanation:
ECCouncil 712-50 : Practice Test

 

NEW QUESTION 35
The BEST organization to provide a comprehensive, independent and certifiable perspective on established security controls in an environment is

• A. Forensic experts
• B. Penetration testers
• C. Internal Audit
• D. External Audit

Answer: D

 

NEW QUESTION 36
......

Give push to your success with 712-50 exam questions: https://www.braindumpsit.com/712-50_real-exam.html

Prepare 712-50 Exam Questions Recently Updated Questions: https://drive.google.com/open?id=1F52jtz_trrPPTq63rlwbCFsx3j7KwkYW