Home / ECCouncil / 712-50

ECCouncil 712-50 Practice Test - Questions Answers, Page 12

Question list

List of questions

Question 111

(0)

An IT auditor has recently discovered that because of a shortage of skilled operations personnel, the security administrator has agreed to work one late night shift a week as the senior computer ope

Question 112

(0)

Which of the following is the MOST important goal of risk management?

Question 113

(0)

You work as a project manager for TYU project. You are planning for risk mitigation. You need to quickly identify high-level risks that will need a more in-depth analysis. Which of the following act

Question 114

(0)

Which of the following activities results in change requests?

Question 115

(0)

Which of the following is a term related to risk management that represents the estimated frequency at which a threat is expected to transpire?

Question 116

(0)

Which of the following tests is an IS auditor performing when a sample of programs is selected to determine if the source and object versions are the same?

Question 117

(0)

Creating a secondary authentication process for network access would be an example of?

Question 118

(0)

The patching and monitoring of systems on a consistent schedule is required by?

Question 119

(0)

As the new CISO at the company you are reviewing the audit reporting process and notice that it includes only detailed technical diagrams. What else should be in the reporting process?

Question 120

(0)

As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building. Below your office window you notice a door that is normally propped open during the day

Question 111

An IT auditor has recently discovered that because of a shortage of skilled operations personnel, the security administrator has agreed to work one late night shift a week as the senior computer operator. The most appropriate course of action for the IT auditor is to:

Inform senior management of the risk involved.

Agree to work with the security officer on these shifts as a form of preventative control.

Develop a computer assisted audit technique to detect instances of abuses of the arrangement.

Review the system log for each of the late night shifts to determine whether any irregular actions occurred.

Show Answer Comment (0)

Question 112

Which of the following is the MOST important goal of risk management?

Identifying the risk

Finding economic balance between the impact of the risk and the cost of the control

Identifying the victim of any potential exploits.

Assessing the impact of potential threats

Show Answer Comment (0)

Question 113

You work as a project manager for TYU project. You are planning for risk mitigation. You need to quickly identify high-level risks that will need a more in-depth analysis. Which of the following activities will help you in this?

Qualitative analysis

Quantitative analysis

Risk mitigation

Estimate activity duration

Show Answer Comment (0)

Question 114

Which of the following activities results in change requests?

Preventive actions

Inspection

Defect repair

Corrective actions

Show Answer Comment (0)

Question 115

Which of the following is a term related to risk management that represents the estimated frequency at which a threat is expected to transpire?

Single Loss Expectancy (SLE)

Exposure Factor (EF)

Annualized Rate of Occurrence (ARO)

Temporal Probability (TP)

Show Answer Comment (0)

Question 116

Which of the following tests is an IS auditor performing when a sample of programs is selected to determine if the source and object versions are the same?

A substantive test of program library controls

A compliance test of program library controls

A compliance test of the program compiler controls

A substantive test of the program compiler controls

Show Answer Comment (0)

Question 117

Creating a secondary authentication process for network access would be an example of?

An administrator with too much time on their hands.

Putting undue time commitment on the system administrator.

Supporting the concept of layered security

Network segmentation.

Show Answer Comment (0)

Question 118

The patching and monitoring of systems on a consistent schedule is required by?

Local privacy laws

Industry best practices

Risk Management frameworks

Audit best practices

Show Answer Comment (0)

Question 119

As the new CISO at the company you are reviewing the audit reporting process and notice that it includes only detailed technical diagrams. What else should be in the reporting process?

Executive summary

Penetration test agreement

Names and phone numbers of those who conducted the audit

Business charter

Show Answer Comment (0)

Question 120

As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building. Below your office window you notice a door that is normally propped open during the day for groups of people to take breaks outside. Upon looking closer you see there is no badge reader.

What should you do?

Nothing, this falls outside your area of influence.

Close and chain the door shut and send a company-wide memo banning the practice.

Have a risk assessment performed.

Post a guard at the door to maintain physical security

Show Answer Comment (0)

Total 460 questions