712-50 EC-Council Exam Questions and Free Practice Test

Question 25

- (Topic 2)
In MOST organizations which group periodically reviews network intrusion detection system logs for all systems as part of their daily tasks?

A. Internal Audit

B. Database Administration

C. Information Security

D. Compliance

Correct Answer:C

Question 26

- (Topic 5)
Which of the following is MOST useful when developing a business case for security initiatives?

A. Budget forecasts

B. Request for proposals

C. Cost/benefit analysis

D. Vendor management

Correct Answer:C

Question 27

- (Topic 1)
When deploying an Intrusion Prevention System (IPS) the BEST way to get maximum protection from the system is to deploy it

A. In promiscuous mode and only detect malicious traffic.

B. In-line and turn on blocking mode to stop malicious traffic.

C. In promiscuous mode and block malicious traffic.

D. In-line and turn on alert mode to stop malicious traffic.

Correct Answer:B

Question 28

- (Topic 1)
What is the relationship between information protection and regulatory compliance?

A. That all information in an organization must be protected equally.

B. The information required to be protected by regulatory mandate does not have to be identified in the organizations data classification policy.

C. That the protection of some information such as National ID information is mandated by regulation and other information such as trade secrets are protected based on business need.

D. There is no relationship between the two.

Correct Answer:C

Question 29

- (Topic 2)
Which of the following activities must be completed BEFORE you can calculate risk?

A. Determining the likelihood that vulnerable systems will be attacked by specific threats

B. Calculating the risks to which assets are exposed in their current setting

C. Assigning a value to each information asset

D. Assessing the relative risk facing the organization’s information assets

Correct Answer:C

Question 30

- (Topic 5)
Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates.
When multiple regulations or standards apply to your industry you should set controls to meet the:

A. Easiest regulation or standard to implement

B. Stricter regulation or standard

C. Most complex standard to implement

D. Recommendations of your Legal Staff

Correct Answer:A

START 712-50 EXAM