Home / ECCouncil / 712-50

ECCouncil 712-50 Practice Test - Questions Answers, Page 18

Question list

List of questions

Question 171

(0)

Which of the following represents the BEST reason for an organization to use the Control Objectives for Information and Related Technology (COBIT) as an Information Technology (IT) framework?

Question 172

(0)

You are the Chief Information Security Officer of a large, multinational bank and you suspect there is a flaw in a two factor authentication token management process. Which of the following represen

Question 173

(0)

A person in your security team calls you at night and informs you that one of your web applications is potentially under attack from a cross-site scripting vulnerability. What do you do?

Question 174

(0)

An international organization is planning a project to implement encryption technologies to protect company confidential information. This organization has data centers on three continents. Which of

Question 175

(0)

A system was hardened at the Operating System level and placed into the production environment. Months later an audit was performed and it identified insecure configuration different from the origi

Question 176

(0)

Which of the following are not stakeholders of IT security projects?

Question 177

(0)

The ultimate goal of an IT security projects is:

Question 178

(0)

When managing the critical path of an IT security project, which of the following is MOST important?

Question 179

(0)

When is an application security development project complete?

Question 180

(0)

When should IT security project management be outsourced?

Question 171

Which of the following represents the BEST reason for an organization to use the Control Objectives for Information and Related Technology (COBIT) as an Information Technology (IT) framework?

It allows executives to more effectively monitor IT implementation costs

Implementation of it eases an organization's auditing and compliance burden

Information Security (IS) procedures often require augmentation with other standards

It provides for a consistent and repeatable staffing model for technology organizations

Show Answer Comment (0)

You are the Chief Information Security Officer of a large, multinational bank and you suspect there is a flaw in a two factor authentication token management process. Which of the following represents your BEST course of action?

Validate that security awareness program content includes information about the potential vulnerability

Conduct a thorough risk assessment against the current implementation to determine system functions

Determine program ownership to implement compensating controls

Send a report to executive peers and business unit owners detailing your suspicions

Show Answer Comment (0)

Question 173

A person in your security team calls you at night and informs you that one of your web applications is potentially under attack from a cross-site scripting vulnerability. What do you do?

tell him to shut down the server

tell him to call the police

tell him to invoke the incident response process

tell him to analyze the problem, preserve the evidence and provide a full analysis and report

Show Answer Comment (0)

Question 174

An international organization is planning a project to implement encryption technologies to protect company confidential information. This organization has data centers on three continents. Which of the following would be considered a

MAJOR constraint for the project?

Time zone differences

Compliance to local hiring laws

Encryption import/export regulations

Local customer privacy laws

Show Answer Comment (0)

Question 175

A system was hardened at the Operating System level and placed into the production environment.

Months later an audit was performed and it identified insecure configuration different from the original hardened state. Which of the following security issues is the MOST likely reason leading to the audit findings?

Lack of asset management processes

Lack of change management processes

Lack of hardening standards

Lack of proper access controls

Show Answer Comment (0)