Which of the following is the MAIN security concern for public cloud computing?

Unable to control physical access to the servers

Unable to track log on activity

Unable to patch systems as needed

The process of identifying and classifying assets is typically included in the

Asset configuration management process

Physical security measures typically include which of the following components?

Physical, Technical, Operational

Technical, Strong Password, Operational

Operational, Biometric, Physical

Strong password, Biometric, Common Access Card

Which wireless encryption technology makes use of temporal keys?

Wifi Protected Access version 2 (WPA2)

Wireless Application Protocol (WAP)

Wifi Protected Access version 2 (WPA2)

Wireless Equivalence Protocol (WEP)

Extensible Authentication Protocol (EAP)

Your penetration testing team installs an in-line hardware key logger onto one of your network machines. Which of the following is of major concern to the security organization?

In-line hardware keyloggers are undetectable by software

In-line hardware keyloggers don't require physical access

In-line hardware keyloggers don't comply to industry regulations

In-line hardware keyloggers are undetectable by software

In-line hardware keyloggers are relatively inexpensive

Your organization provides open guest wireless access with no captive portals. What can you do to assist with law enforcement investigations if one of your guests is suspected of committing an illegal act using your network?

Configure logging on each access point

Install a firewall software on each wireless access point.

Disable SSID Broadcast and enable MAC address filtering on all wireless access points.

Which of the following statements about Encapsulating Security Payload (ESP) is true?

It is a text-based communication protocol.

It uses TCP port 22 as the default port and operates at the application layer.

The ability to hold intruders accountable in a court of law is important. Which of the following activities are needed to ensure the highest possibility for successful prosecution?

Well established and defined digital forensics process

Establishing Enterprise-owned Botnets for preemptive attacks

Be able to retaliate under the framework of Active Defense

Collaboration with law enforcement

Network Forensics is the prerequisite for any successful legal action after attacks on your Enterprise Network. Which is the single most important factor to introducing digital evidence into a court of law?

Comprehensive Log-Files from all servers and network devices affected during the attack

Fully trained network forensic experts to analyze all data right after the attack

The general ledger setup function in an enterprise resource package allows for setting accounting periods. Access to this function has been permitted to users in finance, the shipping department, and production scheduling. What is the most likely reason for such broad access?

The lack of policies and procedures for the proper segregation of duties.

The need to change accounting periods on a regular basis.

The requirement to post entries for a closed accounting period.

The need to create and modify the chart of accounts and its allocations.

The lack of policies and procedures for the proper segregation of duties.

While designing a secondary data center for your company what document needs to be analyzed to determine to how much should be spent on building the data center?

Disaster recovery strategic plan

Which of the following conditions would be the MOST probable reason for a security project to be rejected by the executive board of an organization?

The NPV of the project is negative

The Net Present Value (NPV) of the project is positive

The NPV of the project is negative

The Return on Investment (ROI) is larger than 10 months

The ROI is lower than 10 months

The process to evaluate the technical and non-technical security controls of an IT system to validate that a given design and implementation meet a specific set of security requirements is called

Alignment with business practices and goals.

The process for management approval of the security certification process which states the risks and mitigation of such risks of a given IT system is called

Alignment with business practices and goals.

Access Control lists (ACLs), Firewalls, and Intrusion Prevention Systems are examples of

Network based security preventative controls

Network based security detective controls

File Integrity Monitoring (FIM) is considered a

Network based security preventative control

ECCouncil 712-50 Practice Test 7 - Free Online Exam Prep & Questions

In terms of supporting a forensic investigation, it is now imperative that managers, first-responders, etc., accomplish the following actions to the computer under investigation:

Become a Premium Member for full access

Unlock Premium Member

ECCouncil 712-50 Practice Test 7

Question

ECCouncil 712-50 Practice Tests

Practice Tests