712-50 EC-Council Exam Questions and Free Practice Test

Question 55

- (Topic 5)
Scenario: Your company has many encrypted telecommunications links for their world-wide operations. Physically distributing symmetric keys to all locations has proven to be administratively burdensome, but symmetric keys are preferred to other alternatives.
How can you reduce the administrative burden of distributing symmetric keys for your
employer?

A. Use asymmetric encryption for the automated distribution of the symmetric key

B. Use a self-generated key on both ends to eliminate the need for distribution

C. Use certificate authority to distribute private keys

D. Symmetrically encrypt the key and then use asymmetric encryption to unencrypt it

Correct Answer:A

Question 56

- (Topic 3)
Which of the following will be MOST helpful for getting an Information Security project that is behind schedule back on schedule?

A. Upper management support

B. More frequent project milestone meetings

C. More training of staff members

D. Involve internal audit

Correct Answer:A

Question 57

- (Topic 1)
What is a difference from the list below between quantitative and qualitative Risk Assessment?

A. Quantitative risk assessments result in an exact number (in monetary terms)

B. Qualitative risk assessments result in a quantitative assessment (high, medium, low, red, yellow, green)

C. Qualitative risk assessments map to business objectives

D. Quantitative risk assessments result in a quantitative assessment (high, medium, low, red, yellow, green)

Correct Answer:A

Question 58

- (Topic 3)
How often should the SSAE16 report of your vendors be reviewed?

A. Quarterly

B. Semi-annually

C. Annually

D. Bi-annually

Correct Answer:C

Question 59

- (Topic 3)
In effort to save your company money which of the following methods of training results in the lowest cost for the organization?

A. Distance learning/Web seminars

B. Formal Class

C. One-One Training

D. Self –Study (noncomputerized)

Correct Answer:D

Question 60

- (Topic 1)
A Security Operations Centre (SOC) manager is informed that a database containing highly sensitive corporate strategy information is under attack. Information has been stolen and the database server was disconnected. Who must be informed of this incident?

A. Internal audit

B. The data owner

C. All executive staff

D. Government regulators

Correct Answer:B

START 712-50 EXAM