Home / ECCouncil / 712-50

ECCouncil 712-50 Practice Test - Questions Answers, Page 8

Question list

List of questions

Question 71

(0)

Who is responsible for securing networks during a security incident?

Question 72

(0)

Which of the following is a critical operational component of an Incident Response Program (IRP)?

Question 73

(0)

What is the first thing that needs to be completed in order to create a security program for your organization?

Question 74

(0)

What is the main purpose of the Incident Response Team?

Question 75

(0)

Which of the following is a weakness of an asset or group of assets that can be exploited by one or more threats?

Question 76

(0)

Within an organization's vulnerability management program, who has the responsibility to implement remediation actions?

Question 77

(0)

The Information Security Management program MUST protect:

Question 78

(0)

What is the MAIN reason for conflicts between Information Technology and Information Security programs?

Question 79

(0)

The Information Security Governance program MUST:

Question 80

(0)

A security officer wants to implement a vulnerability scanning program. The officer is uncertain of the state of vulnerability resiliency within the organization's large IT infrastructure. What woul

Question 71

Who is responsible for securing networks during a security incident?

Chief Information Security Officer (CISO)

Security Operations Center (SO

Disaster Recovery (DR) manager

Incident Response Team (IRT)

Show Answer Comment (0)

Question 72

Which of the following is a critical operational component of an Incident Response Program (IRP)?

Weekly program budget reviews to ensure the percentage of program funding remains constant.

Annual review of program charters, policies, procedures and organizational agreements.

Daily monitoring of vulnerability advisories relating to your organization's deployed technologies.

Monthly program tests to ensure resource allocation is sufficient for supporting the needs of the organization

Show Answer Comment (0)

Question 73

What is the first thing that needs to be completed in order to create a security program for your organization?

Risk assessment

Security program budget

Business continuity plan

Compliance and regulatory analysis

Show Answer Comment (0)

Question 74

What is the main purpose of the Incident Response Team?

Ensure efficient recovery and reinstate repaired systems

Create effective policies detailing program activities

Communicate details of information security incidents

Provide current employee awareness programs

Show Answer Comment (0)

Question 75

Which of the following is a weakness of an asset or group of assets that can be exploited by one or more threats?

Threat

Vulnerability

Attack vector

Exploitation

Show Answer Comment (0)

Question 76

Within an organization's vulnerability management program, who has the responsibility to implement remediation actions?

Security officer

Data owner

Vulnerability engineer

System administrator

Show Answer Comment (0)

Question 77

The Information Security Management program MUST protect:

all organizational assets

critical business processes and /or revenue streams

intellectual property released into the public domain

against distributed denial of service attacks

Show Answer Comment (0)

Question 78

What is the MAIN reason for conflicts between Information Technology and Information Security programs?

Technology governance defines technology policies and standards while security governance does not.

Security governance defines technology best practices and Information Technology governance does not.

Technology Governance is focused on process risks whereas Security Governance is focused on business risk.

The effective implementation of security controls can be viewed as an inhibitor to rapid Information Technology implementations.

Show Answer Comment (0)

Question 79

The Information Security Governance program MUST:

integrate with other organizational governance processes

support user choice for Bring Your Own Device (BYOD)

integrate with other organizational governance processes

show a return on investment for the organization

Show Answer Comment (0)

A security officer wants to implement a vulnerability scanning program. The officer is uncertain of the state of vulnerability resiliency within the organization's large IT infrastructure. What would be the BEST approach to minimize scan data output while retaining a realistic view of system vulnerability?

Scan a representative sample of systems

Perform the scans only during off-business hours

Decrease the vulnerabilities within the scan tool settings

Filter the scan output so only pertinent data is analyzed

Show Answer Comment (0)

Total 460 questions