Home / ECCouncil / 712-50

ECCouncil 712-50 Practice Test - Questions Answers, Page 41

Question list

List of questions

Question 401

(0)

APLU Limited has recently suffered a security breach with customers' social security number available on the dark web for sale. The CISO, during the time of the incident, has been fired, and you hav

Question 402

(0)

An organization recently acquired a Data Loss Prevention (DLP) solution, and two months after the implementation, it was found that sensitive data was posted to numerous Dark Web sites. The DLP appl

Question 403

(0)

The main purpose of the SOC is:

Question 404

(0)

When obtaining new products and services, why is it essential to collaborate with lawyers, IT security professionals, privacy professionals, security engineers, suppliers, and others?

Question 405

(0)

A cloud computing environment that is bound together by technology that allows data and applications to be shared between public and private clouds is BEST referred to as a?

Question 406

(0)

When reviewing a Solution as a Service (SaaS) provider's security health and posture, which key document should you review?

Question 407

(0)

As the Risk Manager of an organization, you are task with managing vendor risk assessments. During the assessment, you identified that the vendor is engaged with high profiled clients, and bad publi

Question 408

(0)

What is a Statement of Objectives (SOA)?

Question 409

(0)

During a cyber incident, which non-security personnel might be needed to assist the security team?

Question 410

(0)

With a focus on the review and approval aspects of board responsibilities, the Data Governance Council recommends that the boards provide strategic oversight regarding information and information se

Question 401

APLU Limited has recently suffered a security breach with customers' social security number available on the dark web for sale. The CISO, during the time of the incident, has been fired, and you have been hired as the replacement. The analysis of the breach found that the absence of an insider threat program, lack of least privilege policy, and weak access control was to blame. You would like to implement key performance indicators to mitigate the risk.

Which metric would meet the requirement?

Number of times third parties access critical information systems

Number of systems with known vulnerabilities

Number of users with elevated privileges

Number of websites with weak or misconfigured certificates

Show Answer Comment (0)

Question 402

An organization recently acquired a Data Loss Prevention (DLP) solution, and two months after the implementation, it was found that sensitive data was posted to numerous Dark Web sites. The DLP application was checked, and there are no apparent malfunctions and no errors.

What is the MOST likely reason why the sensitive data was posted?

The DLP Solution was not integrated with mobile device anti-malware

Data classification was not properly performed on the assets

The sensitive data was not encrypted while at rest

A risk assessment was not performed after purchasing the DLP solution

Show Answer Comment (0)

Question 403

The main purpose of the SOC is:

An organization which provides Tier 1 support for technology issues and provides escalation when needed

A distributed organization which provides intelligence to governments and private sectors on cyber-criminal activities

The coordination of personnel, processes and technology to identify information security events and provide timely response and remediation

A device which consolidates event logs and provides real-time analysis of security alerts generated by applications and network hardware

Show Answer Comment (0)

Question 404

When obtaining new products and services, why is it essential to collaborate with lawyers, IT security professionals, privacy professionals, security engineers, suppliers, and others?

This makes sure the files you exchange aren't unnecessarily flagged by the Data Loss Prevention (DLP) system

Contracting rules typically require you to have conversations with two or more groups

Discussing decisions with a very large group of people always provides a better outcome

It helps to avoid regulatory or internal compliance issues

Show Answer Comment (0)

Question 405

A cloud computing environment that is bound together by technology that allows data and applications to be shared between public and private clouds is BEST referred to as a?

Public cloud

Private cloud

Community cloud

Hybrid cloud

Show Answer Comment (0)

Question 406

When reviewing a Solution as a Service (SaaS) provider's security health and posture, which key document should you review?

SaaS provider's website certifications and representations (certs and reps)

SOC-2 Report

Metasploit Audit Report

Statement from SaaS provider attesting their ability to secure your data

Show Answer Comment (0)

Question 407

As the Risk Manager of an organization, you are task with managing vendor risk assessments. During the assessment, you identified that the vendor is engaged with high profiled clients, and bad publicity can jeopardize your own brand.

Which is the BEST type of risk that defines this event?

Compliance Risk

Reputation Risk

Operational Risk

Strategic Risk

Show Answer Comment (0)

Question 408

What is a Statement of Objectives (SOA)?

A section of a contract that defines tasks to be performed under said contract

An outline of what the military will do during war

A document that outlines specific desired outcomes as part of a request for proposal

Business guidance provided by the CEO

Show Answer Comment (0)

Question 409

During a cyber incident, which non-security personnel might be needed to assist the security team?

Threat analyst, IT auditor, forensic analyst

Network engineer, help desk technician, system administrator

CIO, CFO, CSO

Financial analyst, payroll clerk, HR manager

Show Answer Comment (0)

Question 410

With a focus on the review and approval aspects of board responsibilities, the Data Governance Council recommends that the boards provide strategic oversight regarding information and information security, include these four things:

Metrics tracking security milestones, understanding criticality of information and information security, visibility into the types of information and how it is used, endorsement by the board of directors

Annual security training for all employees, continual budget reviews, endorsement of the development and implementation of a security program, metrics to track the program

Understanding criticality of information and information security, review investment in information security, endorse development and implementation of a security program, and require regular reports on adequacy and effectiveness

Endorsement by the board of directors for security program, metrics of security program milestones, annual budget review, report on integration and acceptance of program

Show Answer Comment (0)

Total 460 questions