Home / ECCouncil / 712-50

ECCouncil 712-50 Practice Test - Questions Answers, Page 10

Question list

List of questions

Question 91

(0)

What is the BEST way to achieve on-going compliance monitoring in an organization?

Question 92

(0)

Which of the following is the MOST important for a CISO to understand when identifying threats?

Question 93

(0)

Which of the following are the MOST important factors for proactively determining system vulnerabilities?

Question 94

(0)

What role should the CISO play in properly scoping a PCI environment?

Question 95

(0)

What should an organization do to ensure that they have a sound Business Continuity (BC) Plan?

Question 96

(0)

What is the SECOND step to creating a risk management methodology according to the National Institute of Standards and Technology (NIST) SP 800-30 standard?

Question 97

(0)

According to the National Institute of Standards and Technology (NIST) SP 800-40, which of the following considerations are MOST important when creating a vulnerability management program?

Question 98

(0)

Which of the following best represents a calculation for Annual Loss Expectancy (ALE)?

Question 99

(0)

When measuring the effectiveness of an Information Security Management System which one of the following would be MOST LIKELY used as a metric framework?

Question 100

(0)

The regular review of a firewall ruleset is considered a

Question 91

What is the BEST way to achieve on-going compliance monitoring in an organization?

Only check compliance right before the auditors are scheduled to arrive onsite.

Outsource compliance to a 3rd party vendor and let them manage the program.

Have Compliance and Information Security partner to correct issues as they arise.

Have Compliance direct Information Security to fix issues after the auditors report.

Show Answer Comment (0)

Question 92

Which of the following is the MOST important for a CISO to understand when identifying threats?

How vulnerabilities can potentially be exploited in systems that impact the organization

How the security operations team will behave to reported incidents

How the firewall and other security devices are configured to prevent attacks

How the incident management team prepares to handle an attack

Show Answer Comment (0)

Question 93

Which of the following are the MOST important factors for proactively determining system vulnerabilities?

Subscribe to vendor mailing list to get notification of system vulnerabilities

Deploy Intrusion Detection System (IDS) and install anti-virus on systems

Configure firewall, perimeter router and Intrusion Prevention System (IPS)

Conduct security testing, vulnerability scanning, and penetration testing

Show Answer Comment (0)

Question 94

What role should the CISO play in properly scoping a PCI environment?

Validate the business units' suggestions as to what should be included in the scoping process

Work with a Qualified Security Assessor (QSA) to determine the scope of the PCI environment

Ensure internal scope validation is completed and that an assessment has been done to discover all credit card data

Complete the self-assessment questionnaire and work with an Approved Scanning Vendor (ASV) to determine scope

Show Answer Comment (0)

Question 95

What should an organization do to ensure that they have a sound Business Continuity (BC) Plan?

Test every three years to ensure that things work as planned

Conduct periodic tabletop exercises to refine the BC plan

Outsource the creation and execution of the BC plan to a third party vendor

Conduct a Disaster Recovery (DR) exercise every year to test the plan

Show Answer Comment (0)

Question 96

What is the SECOND step to creating a risk management methodology according to the National Institute of Standards and Technology (NIST) SP 800-30 standard?

Determine appetite

Evaluate risk avoidance criteria

Perform a risk assessment

Mitigate risk

Show Answer Comment (0)

Question 97

According to the National Institute of Standards and Technology (NIST) SP 800-40, which of the following considerations are MOST important when creating a vulnerability management program?

Susceptibility to attack, mitigation response time, and cost

Attack vectors, controls cost, and investigation staffing needs

Vulnerability exploitation, attack recovery, and mean time to repair

Susceptibility to attack, expected duration of attack, and mitigation availability

Show Answer Comment (0)

Question 98

Which of the following best represents a calculation for Annual Loss Expectancy (ALE)?

Single loss expectancy multiplied by the annual rate of occurrence

Total loss expectancy multiplied by the total loss frequency

Value of the asset multiplied by the loss expectancy

Replacement cost multiplied by the single loss expectancy

Show Answer Comment (0)

Question 99

When measuring the effectiveness of an Information Security Management System which one of the following would be MOST LIKELY used as a metric framework?

ISO 27001

PRINCE2

ISO 27004

ITILv3

Show Answer Comment (0)