712-50 Exam Dumps Pass with Updated 2022 Certified Exam Questions [Q213-Q236]

712-50 Exam Dumps Pass with Updated 2022 Certified Exam Questions

712-50 Exam Questions - Real & Updated Questions PDF

EC-Council 712-50: Preparation Phase

EC-Council offers the comprehensive resources that the students can use to prepare for the test. Thus, the first thing that you must do after making up your mind to pursue the certification exam is to download the blueprint from the official website. It is important to go over the topics it covers in detail before starting any preparation. This is a starting point, and after that, you should proceed with the following steps:

To gain competence in the exam topics, the next step is to get the EC-Council CCISO BOK. It covers five domains of Information Security Management in detail and explains the concepts. Having this material will act as a reference resource throughout the preparation process and even beyond;
EC-Council also offers the official training course to help you adequately prepare for the 712-50 test. Those who want to choose the self-study route do not need to attend this option. They can proceed to purchase the CCISO Body of Knowledge for exam preparation. The applicants can also purchase only the courseware, but to choose this variant of preparation, they must possess the required experience in information security management. They should submit a filled exam eligibility application form that validates that they possess a minimum of five years of work experience in five CCISO domains.
An alternative preparation option is the iLearn self-paced online training. It covers the same modules that are covered in the live course. The only difference is that the iLearn option is prerecorded and offered as a streaming video tutorial. It is recommended for the individuals with busy work schedules.

The learners can also opt for the in-person training, which is delivered by an expert and certified EC-Council trainer. The details of all the available resources can be found on the official site.

NEW QUESTION 213
What type of attack requires the least amount of technical equipment and has the highest success rate?

A. War driving
B. Shrink wrap attack
C. Operating system attacks
D. Social engineering

Answer: D

NEW QUESTION 214
During the 3rd quarter of a budget cycle, the CISO noticed she spent more than was originally planned in her annual budget. What is the condition of her current budgetary posture?

A. She can realign the budget through moderate capital expense (CAPEX) allocation
B. The budget is in a temporary state of imbalance
C. The budget is operating at a deficit
D. She has a surplus of operational expenses (OPEX)

Answer: B

NEW QUESTION 215
The new CISO was informed of all the Information Security projects that the organization has in progress. Two projects are over a year behind schedule and over budget. Using best business practices for project management you determine that the project correctly aligns with the company goals.
Which of the following needs to be performed NEXT?

A. Verify capacity constraints
B. Verify the regulatory requirements
C. Verify technical resources
D. Verify the scope of the project

Answer: C

Explanation:
Explanation/Reference:

NEW QUESTION 216
When deploying an Intrusion Prevention System (IPS) the BEST way to get maximum protection from the system is to deploy it___________

A. In-lie and turn on alert mode to stop malicious traffic.
B. In promiscuous mode and block malicious traffic.
C. In promiscuous mode and only detect malicious traffic.
D. In-line and turn on blocking mode to stop malicious traffic.

Answer: D

NEW QUESTION 217
You have recently drafted a revised information security policy. From whom should you seek endorsement in order to have the GREATEST chance for adoption and implementation throughout the entire organization?

A. Chief Information Officer
B. Chief Legal Counsel
C. Chief Information Security Officer
D. Chief Executive Officer

Answer: D

Explanation:
ECCouncil 712-50 : Practice Test

NEW QUESTION 218
Which of the following is the MOST effective method for discovering common technical vulnerabilities within the IT environment?

A. Checking vendor product releases
B. Performing system scans
C. Reviewing system administrator logs
D. Auditing configuration templates

Answer: B

NEW QUESTION 219
Which is the BEST solution to monitor, measure, and report changes to critical data in a system?

A. Syslog
B. File integrity monitoring
C. SNMP traps
D. Application logs

Answer: B

Explanation:
Explanation

NEW QUESTION 220
Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.
From an Information Security Leadership perspective, which of the following is a MAJOR concern about the CISO's approach to security?

A. Compliance centric agenda
B. Lack of risk management process
C. IT security centric agenda
D. Lack of sponsorship from executive management

Answer: C

Explanation:
Explanation/Reference:

NEW QUESTION 221
What process defines the framework of rules and practices by which a board of directors ensure accountability, fairness and transparency in an organization's relationship with its shareholders?

A. Key Performance Indicators
B. Corporate governance
C. Risk Oversight
D. Internal Audit

Answer: B

Explanation:
Explanation/Reference: https://www.igi-global.com/dictionary/corporate-governance/5957

NEW QUESTION 222
The network administrator wants to strengthen physical security in the organization. Specifically, to implement a solution stopping people from entering certain restricted zones without proper credentials. Which of following physical security measures should the administrator use?

A. Bollards
B. Mantrap
C. Fence
D. Video surveillance

Answer: C

NEW QUESTION 223
The regular review of a firewall ruleset is considered a

A. Technical control
B. Management control
C. Organization control
D. Procedural control

Answer: D

NEW QUESTION 224
Who in the organization determines access to information?

A. Compliance officer
B. Information security officer
C. Data Owner
D. Legal department

Answer: C

NEW QUESTION 225
You currently cannot provide for 24/7 coverage of your security monitoring and incident response duties and your company is resistant to the idea of adding more full-time employees to the payroll. Which combination of solutions would help to provide the coverage needed without the addition of more dedicated staff? (choose the best answer):

A. Employ an assumption of breach protocol and defend only essential information resources
B. Deploy a SEIM solution and have current staff review incidents first thing in the morning
C. Contract with a managed security provider and have current staff on recall for incident response
D. Configure your syslog to send SMS messages to current staff when target events are triggered

Answer: C

NEW QUESTION 226
Acceptable levels of information security risk tolerance in an organization should be determined by?

A. CEO and board of director
B. CISO with reference to the company goals
C. Corporate legal counsel
D. Corporate compliance committee

Answer: A

NEW QUESTION 227
A new CISO just started with a company and on the CISO's desk is the last complete Information Security Management audit report. The audit report is over two years old. After reading it, what should be the CISO's FIRST priority?

A. Have internal audit conduct another audit to see what has changed.
B. Review the recommendations and follow up to see if audit implemented the changes
C. Contract with an external audit company to conduct an unbiased audit
D. Meet with audit team to determine a timeline for corrections

Answer: B

NEW QUESTION 228
As the CISO for your company you are accountable for the protection of information resources commensurate with:

A. Insurability tables
B. Risk of exposure
C. Customer demand
D. Cost and time to replace

Answer: B

NEW QUESTION 229
A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization. Which of the following principles does this best demonstrate?

A. Alignment with the business
B. Leveraging existing implementations
C. Proper budget management
D. Effective use of existing technologies

Answer: A

NEW QUESTION 230
The general ledger setup function in an enterprise resource package allows for setting accounting periods. Access to this function has been permitted to users in finance, the shipping department, and production scheduling. What is the most likely reason for such broad access?

A. The need to change accounting periods on a regular basis.
B. The requirement to post entries for a closed accounting period.
C. The lack of policies and procedures for the proper segregation of duties.
D. The need to create and modify the chart of accounts and its allocations.

Answer: C

NEW QUESTION 231
The success of the Chief Information Security Officer is MOST dependent upon:

A. following the recommendations of consultants and contractors
B. favorable audit findings
C. raising awareness of security issues with end users
D. development of relationships with organization executives

Answer: D

NEW QUESTION 232
The establishment of a formal risk management framework and system authorization program is essential. The LAST step of the system authorization process is:

A. Changing the default passwords
B. Getting authority to operate the system from executive management
C. Conducting a final scan of the live system and mitigating all high and medium level vulnerabilities
D. Contacting the Internet Service Provider for an IP scope

Answer: B

NEW QUESTION 233
The patching and monitoring of systems on a consistent schedule is required by?

A. Risk Management framework
B. Local privacy laws
C. Audit best practices
D. Industry best practices

Answer: A

Explanation:
Explanation

NEW QUESTION 234
You are just hired as the new CISO and are being briefed on all the Information Security projects that your section has on going. You discover that most projects are behind schedule and over budget. Using the best business practices for project management you determine that the project correctly aligns with the company goals and the scope of the project is correct.
What is the NEXT step?