Home / ECCouncil / 712-50

ECCouncil 712-50 Practice Test - Questions Answers, Page 22

Question list

List of questions

Question 211

(0)

In order for a CISO to have true situational awareness there is a need to deploy technology that can give a real-time view of security events across the enterprise. Which tool selection represents t

Question 212

(0)

You manage a newly created Security Operations Center (SOC), your team is being inundated with security alerts and don't know what to do. What is the BEST approach to handle this situation?

Question 213

(0)

An example of professional unethical behavior is:

Question 214

(0)

A department within your company has proposed a third party vendor solution to address an urgent, critical business need. As the CISO you have been asked to accelerate screening of their security co

Question 215

(0)

A severe security threat has been detected on your corporate network. As CISO you quickly assemble key members of the Information Technology team and business operations to determine a modification

Question 216

(0)

Question 217

(0)

Which of the following will be MOST helpful for getting an Information Security project that is behind schedule back on schedule?

Question 218

(0)

How often should the SSAE16 report of your vendors be reviewed?

Question 219

(0)

A CISO sees abnormally high volumes of exceptions to security requirements and constant pressure from business units to change security processes. Which of the following represents the MOST LIKELY c

Question 220

(0)

Which of the following represents the best method of ensuring business unit alignment with security program requirements?

Question 211

In order for a CISO to have true situational awareness there is a need to deploy technology that can give a real-time view of security events across the enterprise. Which tool selection represents the BEST choice to achieve situational awareness?

Vmware, router, switch, firewall, syslog, vulnerability management system (VMS)

Intrusion Detection System (IDS), firewall, switch, syslog

Security Incident Event Management (SIEM), IDS, router, syslog

SIEM, IDS, firewall, VMS

Show Answer Comment (0)

Question 212

You manage a newly created Security Operations Center (SOC), your team is being inundated with security alerts and don't know what to do. What is the BEST approach to handle this situation?

Tell the team to do their best and respond to each alert

Tune the sensors to help reduce false positives so the team can react better

Request additional resources to handle the workload

Tell the team to only respond to the critical and high alerts

Show Answer Comment (0)

Question 213

An example of professional unethical behavior is:

Gaining access to an affiliated employee's work email account as part of an officially sanctioned internal investigation

Sharing copyrighted material with other members of a professional organization where all members have legitimate access to the material

Copying documents from an employer's server which you assert that you have an intellectual property claim to possess, but the company disputes

Storing client lists and other sensitive corporate internal documents on a removable thumb drive

Show Answer Comment (0)

Question 214

A department within your company has proposed a third party vendor solution to address an urgent, critical business need. As the CISO you have been asked to accelerate screening of their security control claims. Which of the following vendor provided documents is BEST to make your decision:

Vendor's client list of reputable organizations currently using their solution

Vendor provided attestation of the detailed security controls from a reputable accounting firm

Vendor provided reference from an existing reputable client detailing their implementation

Vendor provided internal risk assessment and security control documentation

Show Answer Comment (0)

Question 215

A severe security threat has been detected on your corporate network. As CISO you quickly assemble key members of the Information Technology team and business operations to determine a modification to security controls in response to the threat. This is an example of:

Change management

Business continuity planning

Security Incident Response

Thought leadership

Show Answer Comment (0)

Question 216

A recommended method to document the respective roles of groups and individuals for a given process is to:

Develop a detailed internal organization chart

Develop a telephone call tree for emergency response

Develop an isolinear response matrix with cost benefit analysis projections

Develop a Responsible, Accountable, Consulted, Informed (RACI) chart

Show Answer Comment (0)

Question 217

Which of the following will be MOST helpful for getting an Information Security project that is behind schedule back on schedule?

Upper management support

More frequent project milestone meetings

More training of staff members

Involve internal audit

Show Answer Comment (0)

Question 218

How often should the SSAE16 report of your vendors be reviewed?

Quarterly

Semi-annually

Annually

Bi-annually

Show Answer Comment (0)

Question 219

A CISO sees abnormally high volumes of exceptions to security requirements and constant pressure from business units to change security processes. Which of the following represents the MOST LIKELY cause of this situation?

Poor audit support for the security program

A lack of executive presence within the security program

Poor alignment of the security program to business needs

This is normal since business units typically resist security requirements

Show Answer Comment (0)