Home / ECCouncil / 712-50

ECCouncil 712-50 Practice Test - Questions Answers, Page 4

Question list

List of questions

Question 31

(0)

Which of the following intellectual Property components is focused on maintaining brand recognition?

Question 32

(0)

The framework that helps to define a minimum standard of protection that business stakeholders must attempt to achieve is referred to as a standard of:

Question 33

(0)

When an organization claims it is secure because it is PCI-DSS certified, what is a good first question to ask towards assessing the effectiveness of their security program?

Question 34

(0)

What is a difference from the list below between quantitative and qualitative Risk Assessment?

Question 35

(0)

What is the definition of Risk in Information Security?

Question 36

(0)

Quantitative Risk Assessments have the following advantages over qualitative risk assessments:

Question 37

(0)

Which of the following is MOST important when dealing with an Information Security Steering committee:

Question 38

(0)

A business unit within your organization intends to deploy a new technology in a manner that places it in violation of existing information security standards. What immediate action should the infor

Question 39

(0)

The PRIMARY objective of security awareness is to:

Question 40

(0)

Which of the following is MOST likely to be discretionary?

Question 31

Which of the following intellectual Property components is focused on maintaining brand recognition?

Trademark

Patent

Research Logs

Show Answer Comment (0)

Question 32

The framework that helps to define a minimum standard of protection that business stakeholders must attempt to achieve is referred to as a standard of:

Due Protection

Due Care

Due Compromise

Due process

Show Answer Comment (0)

Question 33

When an organization claims it is secure because it is PCI-DSS certified, what is a good first question to ask towards assessing the effectiveness of their security program?

How many credit card records are stored?

How many servers do you have?

What is the scope of the certification?

What is the value of the assets at risk?

Show Answer Comment (0)

Question 34

What is a difference from the list below between quantitative and qualitative Risk Assessment?

Quantitative risk assessments result in an exact number (in monetary terms)

Qualitative risk assessments result in a quantitative assessment (high, medium, low, red, yellow, green)

Qualitative risk assessments map to business objectives

Quantitative risk assessments result in a quantitative assessment (high, medium, low, red, yellow, green)

Show Answer Comment (0)

Question 35

What is the definition of Risk in Information Security?

Risk = Probability x Impact

Risk = Threat x Probability

Risk = Financial Impact x Probability

Risk = Impact x Threat

Show Answer Comment (0)

Question 36

Quantitative Risk Assessments have the following advantages over qualitative risk assessments:

They are objective and can express risk / cost in real numbers

They are subjective and can be completed more quickly

They are objective and express risk / cost in approximates

They are subjective and can express risk /cost in real numbers

Show Answer Comment (0)

Question 37

Which of the following is MOST important when dealing with an Information Security Steering committee:

Include a mix of members from different departments and staff levels.

Ensure that security policies and procedures have been vetted and approved.

Review all past audit and compliance reports.

Be briefed about new trends and products at each meeting by a vendor.

Show Answer Comment (0)

A business unit within your organization intends to deploy a new technology in a manner that places it in violation of existing information security standards. What immediate action should the information security manager take?

Enforce the existing security standards and do not allow the deployment of the new technology.

Amend the standard to permit the deployment.

If the risks associated with that technology are not already identified, perform a risk analysis to quantify the risk, and allow the business unit to proceed based on the identified risk level.

Permit a 90-day window to see if an issue occurs and then amend the standard if there are no issues.

Show Answer Comment (0)