Home / ECCouncil / 712-50

ECCouncil 712-50 Practice Test - Questions Answers, Page 5

Question list

List of questions

Question 41

(0)

Why is it vitally important that senior management endorse a security policy?

Question 42

(0)

When would it be more desirable to develop a set of decentralized security policies and procedures within an enterprise environment?

Question 43

(0)

What is the relationship between information protection and regulatory compliance?

Question 44

(0)

Regulatory requirements typically force organizations to implement

Question 45

(0)

When managing the security architecture for your company you must consider:

Question 46

(0)

If your organization operates under a model of "assumption of breach", you should:

Question 47

(0)

A method to transfer risk is to:

Question 48

(0)

You have a system with 2 identified risks. You determine the probability of one risk occurring is higher than the

Question 49

(0)

Ensuring that the actions of a set of people, applications and systems follow the organization's rules is BEST described as:

Question 50

(0)

A security manager regualrly checks work areas after buisness hours for security violations; such as unsecured files or unattended computers with active sessions. This activity BEST demonstrates wha

Question 41

Why is it vitally important that senior management endorse a security policy?

So that they will accept ownership for security within the organization.

So that employees will follow the policy directives.

So that external bodies will recognize the organizations commitment to security.

So that they can be held legally accountable.

Show Answer Comment (0)

Question 42

When would it be more desirable to develop a set of decentralized security policies and procedures within an enterprise environment?

When there is a need to develop a more unified incident response capability.

When the enterprise is made up of many business units with diverse business activities, risks profiles and regulatory requirements.

When there is a variety of technologies deployed in the infrastructure.

When it results in an overall lower cost of operating the security program.

Show Answer Comment (0)

Question 43

What is the relationship between information protection and regulatory compliance?

That all information in an organization must be protected equally.

The information required to be protected by regulatory mandate does not have to be identified in the organizations data classification policy.

That the protection of some information such as National ID information is mandated by regulation and other information such as trade secrets are protected based on business need.

There is no relationship between the two.

Show Answer Comment (0)

Question 44

Regulatory requirements typically force organizations to implement

Mandatory controls

Discretionary controls

Optional controls

Financial controls

Show Answer Comment (0)

Question 45

When managing the security architecture for your company you must consider:

Security and IT Staff size

Company Values

Budget

All of the above

Show Answer Comment (0)

Question 46

If your organization operates under a model of "assumption of breach", you should:

Protect all information resource assets equally

Establish active firewall monitoring protocols

Purchase insurance for your compliance liability

Focus your security efforts on high value assets

Show Answer Comment (0)

Question 47

A method to transfer risk is to:

Implement redundancy

move operations to another region

purchase breach insurance

Alignment with business operations

Show Answer Comment (0)

Question 48

You have a system with 2 identified risks. You determine the probability of one risk occurring is higher than the

Controlled mitigation effort

Risk impact comparison

Relative likelihood of event

Comparative threat analysis

Show Answer Comment (0)

Question 49

Ensuring that the actions of a set of people, applications and systems follow the organization's rules is BEST described as:

Risk management

Security management

Mitigation management

Compliance management

Show Answer Comment (0)

A security manager regualrly checks work areas after buisness hours for security violations; such as unsecured files or unattended computers with active sessions. This activity BEST demonstrates what part of a security program?

Audit validation

Physical control testing

Compliance management

Security awareness training

Show Answer Comment (0)

Total 460 questions