During the 3rd quarter of a budget cycle, the CISO noticed she spent more than was originally planned in her annual budget. What is the condition of her current budgetary posture?

The budget is in a temporary state of imbalance

The budget is operating at a deficit

She can realign the budget through moderate capital expense (CAPEX) allocation

She has a surplus of operational expenses (OPEX)

The primary purpose of a risk register is to:

Maintain a log of discovered risks

Track individual risk assessments

Develop plans for mitigating identified risks

Coordinate the timing of scheduled risk assessments

If a Virtual Machine's (VM) data is being replicated and that data is corrupted, this corruption will automatically be replicated to the other machine(s). What would be the BEST control to safeguard data integrity?

Increase VM replication frequency

Which of the following best describes a portfolio?

A portfolio typically consists of several programs

The portfolio is used to manage and track individual projects

The portfolio is used to manage incidents and events

A portfolio typically consists of several programs

A portfolio delivers one specific service or program to the business

What is meant by password aging?

Time in seconds a user is allocated to change a password

An expiration date set for passwords

Time in seconds a user is allocated to change a password

The amount of time it takes for a password to activate

An organization has a number of Local Area Networks (LANs) linked to form a single Wide Area Network (WAN). Which of the following would BEST ensure network continuity?

Third-party emergency repair contract

Full off-site backup of every server

Which of the following is an accurate statement regarding capital expenses?

They are easily reduced through the elimination of usage, such as reducing power for lighting of work areas during off-hours

Capital expenses can never be replaced by operational expenses

Capital expenses are typically long-term investments with value being realized through their use

The organization is typically able to regain the initial cost by selling this type of asset

A newly-hired CISO needs to understand the organization's financial management standards for business units and operations. Which of the following would be the best source of this information?

The managers of the accounts payables and accounts receivables teams

The internal accounting department

The Chief Financial Officer (CFO)

The external financial audit service

The managers of the accounts payables and accounts receivables teams

A large number of accounts in a hardened system were suddenly compromised to an external party.Which of the following is the MOST probable threat actor involved in this incident?

Advanced Persistent Threat (APT)

Simon had all his systems administrators implement hardware and software firewalls to ensure network security. They implemented IDS/IPS systems throughout the network to check for and stop any unauthorized traffic that may attempt to enter. Although Simon and his administrators believed they were secure, a hacker group was able to get into the network and modify files hosted on the company's website. After searching through the firewall and server logs, no one could find how the attackers were able to get in. He decides that the entire network needs to be monitored for critical and essential file changes. This monitoring tool alerts administrators when a critical file is altered. What tool could Simon and his administrators implement to accomplish this?

Snort is the best tool for their situation.

Which of the following is true regarding expenditures?

Capital expenditures are for acquiring assets, whereas operating expenditures are for support costs of that asset

Capital expenditures are never taxable

Operating expenditures are for acquiring assets, capital expenditures are for support costs of that asset

Capital expenditures are used to define depreciation tables of intangible assets

Capital expenditures are for acquiring assets, whereas operating expenditures are for support costs of that asset

What are the three stages of an identity and access management system?

Authentication, Authorize, Validation

Provision, Administration, Enforcement

Administration, Validation, Protect

Provision, Administration, Authentication

During the last decade, what trend has caused the MOST serious issues in relation to physical security?

Data is more portable due to the increased use of smartphones and tablets

The move from centralized computing to decentralized computing

Camera systems have become more economical and expanded in their use

The internet of Things allows easy compromise of cloud-based systems

Which of the following is the MOST important reason for performing assessments of the security portfolio?

To assure that the portfolio is aligned to the needs of the broader organization

To create executive support of the portfolio

To discover new technologies and processes for implementation within the portfolio

To provide independent 3rd party reviews of security effectiveness

As the Chief Information Security Officer, you want to ensure data shared securely, especially when shared with third parties outside the organization. What protocol provides the ability to extend the network perimeter with the use of encapsulation and encryption?

Virtual Local Area Network (VLAN)

What is one key difference between Capital expenditures and Operating expenditures?

Capital expenses cannot include salaries and Operating expenses can

Operating expense cannot be written off while Capital expense can

Operating expenses can be depreciated over time and Capital expenses cannot

Capital expenses cannot include salaries and Operating expenses can

Capital expenditures allow for the cost to be depreciated over time and Operating does not

Which of the following is an accurate description of a balance sheet?

A summarized statement of all assets and liabilities at a specific point in time

The percentage of earnings that are retained by the organization for reinvestment in the business

The details of expenses and revenue over a long period of time

A summarized statement of all assets and liabilities at a specific point in time

A review of regulations and requirements impacting the business from a financial perspective

What is the difference between encryption and tokenization?

Encryption can be mathematically reversed to provide the original information

Tokenization combined with hashing is always better than encryption

Encryption can be mathematically reversed to provide the original information

The token contains the all original information

Tokenization can be mathematically reversed to provide the original information

Which of the following information would MOST likely be reported at the board-level within an organization?

Significant risks and security incidents that have been discovered since the last assembly of the membership

System scanning trends and results as they pertain to insider and external threat sources

The capabilities of a security program in terms of staffing support

Significant risks and security incidents that have been discovered since the last assembly of the membership

The numbers and types of cyberattacks experienced by the organization since the last assembly of the membership

What are the three hierarchically related aspects of strategic planning and in which order should they be done?

1) Enterprise strategic planning, 2) Cybersecurity or information security strategic planning, 3) Information technology strategic planning

1) Information technology strategic planning, 2) Enterprise strategic planning, 3) Cybersecurity or information security strategic planning

1) Cybersecurity or information security strategic planning, 2) Enterprise strategic planning, 3) Information technology strategic planning

1) Enterprise strategic planning, 2) Information technology strategic planning, 3) Cybersecurity or information security strategic planning

1) Enterprise strategic planning, 2) Cybersecurity or information security strategic planning, 3) Information technology strategic planning

Which of the following would negatively impact a log analysis of a multinational organization?

Log aggregation agent each node

Which of the following statements below regarding Key Performance indicators (KPIs) are true?

Development of KPI's are most useful when done independently

They are a strictly quantitative measure of success

They should be standard throughout the organization versus domain-specific so they are more easily correlated

They are a strictly qualitative measure of success

When information security falls under the Chief Information Officer (CIO), what is their MOST essential role?

Responsible for the success or failure of the IT organization and setting strategic direction

Oversees the organization's day-to-day operations, creating the policies and strategies that govern operations

Enlisting support from key executives the information security program budget and policies

Charged with developing and implementing policies designed to protect employees and customers' data from unauthorized access

Responsible for the success or failure of the IT organization and setting strategic direction

ECCouncil 712-50 Practice Test 10 - Free Online Exam Prep & Questions

When project costs continually increase throughout implementation due to large or rapid changes in customer or user requirements, this is commonly known as:

Become a Premium Member for full access

Unlock Premium Member

ECCouncil 712-50 Practice Test 10

Question

ECCouncil 712-50 Practice Tests

Practice Tests