2024 Provide Updated EC-COUNCIL 712-50 Dumps as Practice Test and PDF
712-50 Dumps are Available for Instant Access
NEW QUESTION # 215
From an information security perspective, information that no longer supports the main purpose of the business should be:
- A. analyzed under the data ownership policy.
- B. assessed by a business impact analysis.
- C. protected under the information classification policy.
- D. analyzed under the retention policy
Answer: D
NEW QUESTION # 216
SCENARIO: A CISO has several two-factor authentication systems under review and selects the one that is most sufficient and least costly. The implementation project planning is completed and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization's needs.
The CISO is unsure of the information provided and orders a vendor proof of concept to validate the system's scalability. This demonstrates which of the following?
- A. An approach that allows for minimum budget impact if the solution is unsuitable
- B. A methodology-based approach to ensure authentication mechanism functions
- C. An approach providing minimum time impact to the implementation schedules
- D. A risk-based approach to determine if the solution is suitable for investment
Answer: D
NEW QUESTION # 217
Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.
Which of the following would be the FIRST step when addressing Information Security formally and consistently in this organization?
- A. Create an executive security steering committee
- B. Define formal roles and responsibilities for Internal audit functions
- C. Define formal roles and responsibilities for Information Security
- D. Contract a third party to perform a security risk assessment
Answer: C
NEW QUESTION # 218
Which of the following is the MOST important goal of risk management?
- A. Assessing the impact of potential threats
- B. Finding economic balance between the impact of the risk and the cost of the control
- C. Identifying the risk
- D. Identifying the victim of any potential exploits.
Answer: B
NEW QUESTION # 219
The organization does not have the time to remediate the vulnerability; however it is critical to release the application.
Which of the following needs to be further evaluated to help mitigate the risks?
- A. Implement Compensating Controls
- B. Provide developer security training
- C. Deploy Intrusion Detection Systems
- D. Provide security testing tools
Answer: A
NEW QUESTION # 220
A department within your company has proposed a third party vendor solution to address an urgent, critical business need. As the CISO you have been asked to accelerate screening of their security control claims.
Which of the following vendor provided documents is BEST to make your decision:
- A. Vendor provided attestation of the detailed security controls from a reputable accounting firm
- B. Vendor provided reference from an existing reputable client detailing their implementation
- C. Vendor's client list of reputable organizations currently using their solution
- D. Vendor provided internal risk assessment and security control documentation
Answer: A
NEW QUESTION # 221
An organization's Information Security Policy is of MOST importance because_____________.
- A. It establishes a framework to protect confidential information
- B. It defines a process to meet compliance requirements
- C. It is formally acknowledged by all employees and vendors
- D. It communicates management's commitment to protecting information resources
Answer: D
NEW QUESTION # 222
What process defines the framework of rules and practices by which a board of directors ensure accountability, fairness and transparency in an organization's relationship with its shareholders?
- A. Risk Oversight
- B. Corporate governance
- C. Internal Audit
- D. Key Performance Indicators
Answer: B
Explanation:
Explanation/Reference: https://www.igi-global.com/dictionary/corporate-governance/5957
NEW QUESTION # 223
A new CISO just started with a company and on the CISO's desk is the last complete Information Security Management audit report. The audit report is over two years old.
After reading it, what should be the CISO's FIRST priority?
- A. Have internal audit conduct another audit to see what has changed.
- B. Review the recommendations and follow up to see if audit implemented the changes
- C. Contract with an external audit company to conduct an unbiased audit
- D. Meet with audit team to determine a timeline for corrections
Answer: B
NEW QUESTION # 224
Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN.
Once supervisors and data owners have approved requests, information system administrators will implement:
- A. Management control(s)
- B. Technical control(s)
- C. Policy controls(s)
- D. Operational control(s)
Answer: B
NEW QUESTION # 225
Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN.
Recently, members of your organization have been targeted through a number of sophisticated phishing attempts and have compromised their system credentials. What action can you take to prevent the misuse of compromised credentials to change bank account information from outside your organization while still allowing employees to manage their bank information?
- A. Block access to the Employee-Self Service application via VPN
- B. Enable monitoring on the VPN for suspicious activity
- C. Turn off VPN access for users originating from outside the country
- D. Force a change of all passwords
Answer: A
NEW QUESTION # 226
Scenario: Your corporate systems have been under constant probing and attack from foreign IP addresses for more than a week. Your security team and security infrastructure have performed well under the stress. You are confident that your defenses have held up under the test, but rumors are spreading that sensitive customer data has been stolen and is now being sold on the Internet by criminal elements. During your investigation of the rumored compromise you discover that data has been breached and you have discovered the repository of stolen data on a server located in a foreign country. Your team now has full access to the data on the foreign server.
What action should you take FIRST?
- A. Destroy the repository of stolen data
- B. Consult with other C-Level executives to develop an action plan
- C. Contact your local law enforcement agency
- D. Contract with a credit reporting company for paid monitoring services for affected customers
Answer: B
NEW QUESTION # 227
Which of the following represents the best method of ensuring business unit alignment with security program requirements?
- A. Demonstrate executive support with written mandates for security policy adherence
- B. Create collaborative risk management approaches within the organization
- C. Provide clear communication of security requirements throughout the organization
- D. Perform increased audits of security processes and procedures
Answer: B
NEW QUESTION # 228
Which of the following activities must be completed BEFORE you can calculate risk?
- A. Assessing the relative risk facing the organization's information assets
- B. Calculating the risks to which assets are exposed in their current setting
- C. Determining the likelihood that vulnerable systems will be attacked by specific threats
- D. Assigning a value to each information asset
Answer: D
NEW QUESTION # 229
Which of the following best describes revenue?
- A. The economic benefit derived by operating a business
- B. The sum value of all assets and cash flow into the business
- C. Non-operating financial liabilities minus expenses
- D. The true profit-making potential of an organization
Answer: A
NEW QUESTION # 230
Which of the following BEST describes an international standard framework that is based on the security model Information Technology-Code of Practice for Information Security Management?
- A. National Institute of Standards and Technology Special Publication SP 800-12
- B. Request For Comment 2196
- C. International Organization for Standardization 27001
- D. National Institute of Standards and Technology Special Publication SP 800-26
Answer: C
NEW QUESTION # 231
When obtaining new products and services, why is it essential to collaborate with lawyers, IT security professionals, privacy professionals, security engineers, suppliers, and others?
- A. This makes sure the files you exchange aren't unnecessarily flagged by the Data Loss Prevention (DLP) system
- B. It helps to avoid regulatory or internal compliance issues
- C. Discussing decisions with a very large group of people always provides a better outcome
- D. Contracting rules typically require you to have conversations with two or more groups
Answer: B
NEW QUESTION # 232
What is the main purpose of the Incident Response Team?
- A. Create effective policies detailing program activities
- B. Ensure efficient recovery and reinstate repaired systems
- C. Provide effective employee awareness programs
- D. Communicate details of information security incidents
Answer: B
NEW QUESTION # 233
Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN.
The organization wants a more permanent solution to the threat to user credential compromise through phishing. What technical solution would BEST address this issue?
- A. Forcing password changes every 90 days
- B. Professional user education on phishing conducted by a reputable vendor
- C. Multi-factor authentication employing hard tokens
- D. Decreasing the number of employees with administrator privileges
Answer: C
NEW QUESTION # 234
The ability to demand the implementation and management of security controls on third parties providing services to an organization is
- A. Vendor management
- B. Security Governance
- C. Disaster recovery
- D. Compliance management
Answer: A
NEW QUESTION # 235
Which regulation or policy governs protection of personally identifiable user data gathered during a cyber investigation?
- A. Sarbanes Oxley
- B. ITIL
- C. Privacy Act
- D. PCI-DSS
Answer: C
NEW QUESTION # 236
Which of the following intellectual Property components is focused on maintaining brand recognition?
- A. Patent
- B. Research Logs
- C. Trademark
- D. Copyright
Answer: C
NEW QUESTION # 237
......
Updated 712-50 Dumps Questions For EC-COUNCIL Exam: https://www.exams-boost.com/712-50-valid-materials.html
Valid 712-50 Dumps for Helping Passing 712-50 Exam!: https://drive.google.com/open?id=1v_JmsIhx95ikxw9696ogK1evRH25ty4i