2022 Latest 512-50 Exam Dumps Recently Updated 402 Questions

EC-COUNCIL 512-50 Real 2022 Braindumps Mock Exam Dumps

What is the duration of the 512-50 Exam

• Length of Examination: 120 minutes
• Number of Questions: 150
• Passing Score 70%
• Format: Multiple choices, multiple answers

Certification Path

There is no prerequisite for this exam.

The benefit in Obtaining the 512-50 Exam Certification

• If the Candidate has the desire to move up to a higher-paying position in an organization. This certification will help as always.
• When an organization hiring or promotion an employee, then the decision is made by human resources. Now while Candidate may have an IT background, they do their decisions in a way that takes into record many different factors. One thing is candidates have formal credentials, such as the EC-Council Information Security Manager.
• After completing EC-Council Information Security Manager certification Candidate becomes a solid, well-rounded Certified Linux Security.
• A candidate might have incredible IT skills. Employers that do the hiring need to make decisions based on limited information and as it always. When they view official EC-Council Information Security Manager certification, they can be guaranteed that a candidate has achieved a certain level of competence.

 

NEW QUESTION 37
Which of the following provides an independent assessment of a vendor's internal security controls and overall posture?

• A. ISO27000 accreditation
• B. PCI attestation of compliance
• C. Alignment with business goals
• D. Financial statements

Answer: A

 

NEW QUESTION 38
A CISO has recently joined an organization with a poorly implemented security program. The desire is to base the security program on a risk management approach. Which of the following is a foundational requirement in order to initiate this type of program?

• A. A security organization that is adequately staffed to apply required mitigation strategies and regulatory compliance solutions
• B. A clearly identified executive sponsor who will champion the effort to ensure organizational buy-in
• C. A clear set of security policies and procedures that are more concept-based than controls-based
• D. A complete inventory of Information Technology assets including infrastructure, networks, applications and data

Answer: B

 

NEW QUESTION 39
What are the primary reasons for the development of a business case for a security project?

• A. To forecast usage and cost per software licensing
• B. To communicate risk and forecast resource needs
• C. To estimate risk and negate liability to the company
• D. To understand the attack vectors and attack sources

Answer: B

 

NEW QUESTION 40
Risk appetite is typically determined by which of the following organizational functions?

• A. Business units
• B. Security
• C. Audit and compliance
• D. Board of Directors

Answer: D

 

NEW QUESTION 41
An audit was conducted and many critical applications were found to have no disaster recovery plans in place.
You conduct a Business Impact Analysis (BIA) to determine impact to the company for each application.
What should be the NEXT step?

• A. Determine the annual loss expectancy (ALE)
• B. Create technology recovery plans
• C. Build a secondary hot site
• D. Create a crisis management plan

Answer: B

 

NEW QUESTION 42
In terms of supporting a forensic investigation, it is now imperative that managers, first-responders, etc., accomplish the following actions to the computer under investigation:

• A. Immediately place hard drive and other components in an anti-static bag
• B. Secure the area and shut-down the computer until investigators arrive
• C. Secure the area and attempt to maintain power until investigators arrive
• D. Secure the area.

Answer: C

 

NEW QUESTION 43
Your incident handling manager detects a virus attack in the network of your company. You develop a signature based on the characteristics of the detected virus. Which of the following phases in the incident handling process will utilize the signature to resolve this incident?

• A. Recovery
• B. Containment
• C. Eradication
• D. Identification

Answer: C

 

NEW QUESTION 44
What are the three hierarchically related aspects of strategic planning and in which order should they be done?

• A. 1) Enterprise strategic planning, 2) Information technology strategic planning, 3) Cybersecurity or information security strategic planning
• B. 1) Enterprise strategic planning, 2) Cybersecurity or information security strategic planning, 3) Information technology strategic planning
• C. 1) Cybersecurity or information security strategic planning, 2) Enterprise strategic planning, 3) Information technology strategic planning
• D. 1) Information technology strategic planning, 2) Enterprise strategic planning, 3) Cybersecurity or information security strategic planning

Answer: B

 

NEW QUESTION 45
Which of the following is the MAIN security concern for public cloud computing?

• A. Unable to track log on activity
• B. Unable to control physical access to the servers
• C. Unable to patch systems as needed
• D. Unable to run anti-virus scans

Answer: B

 

NEW QUESTION 46
In MOST organizations which group periodically reviews network intrusion detection system logs for all systems as part of their daily tasks?

• A. Compliance
• B. Information Security
• C. Database Administration
• D. Internal Audit

Answer: B

 

NEW QUESTION 47
What two methods are used to assess risk impact?

• A. Qualitative and percent of loss realized
• B. Quantitative and qualitative
• C. Subjective and Objective
• D. Cost and annual rate of expectance

Answer: B

 

NEW QUESTION 48
When updating the security strategic planning document what two items must be included?

• A. The risk tolerance of the company and the company mission statement
• B. The alignment with the business goals and the risk tolerance
• C. The executive summary and vision of the board of directors
• D. Alignment with the business goals and the vision of the CIO

Answer: B

 

NEW QUESTION 49
A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization. Which of the following principles does this best demonstrate?

• A. Create a comprehensive security awareness program and provide success metrics to business units
• B. Proper budget management
• C. Effective use of existing technologies
• D. Leveraging existing implementations

Answer: A

 

NEW QUESTION 50
What is the BEST reason for having a formal request for proposal process?

• A. Creates a timeline for purchasing and budgeting
• B. Informs suppliers a company is going to make a purchase
• C. Clearly identifies risks and benefits before funding is spent
• D. Allows small companies to compete with larger companies

Answer: C

 

NEW QUESTION 51
Which of the following reports should you as an IT auditor use to check on compliance with a service level agreement's requirement for uptime?

• A. Availability reports
• B. Systems logs
• C. Utilization reports
• D. Hardware error reports

Answer: A

 

NEW QUESTION 52
You have implemented a new security control. Which of the following risk strategy options have you engaged in?

• A. Risk Acceptance
• B. Risk Mitigation
• C. Risk Avoidance
• D. Risk Transfer

Answer: B

 

NEW QUESTION 53
A security professional has been promoted to be the CISO of an organization. The first task is to create a security policy for this organization. The CISO creates and publishes the security policy. This policy however, is ignored and not enforced consistently. Which of the following is the MOST likely reason for the policy shortcomings?

• A. Lack of a formal security awareness program
• B. Lack of a formal risk management policy
• C. Lack of a formal security policy governance process
• D. Lack of formal definition of roles and responsibilities

Answer: C

 

NEW QUESTION 54
During the 3rd quarter of a budget cycle, the CISO noticed she spent more than was originally planned in her annual budget. What is the condition of her current budgetary posture?

• A. The budget is operating at a deficit
• B. She can realign the budget through moderate capital expense (CAPEX) allocation
• C. She has a surplus of operational expenses (OPEX)
• D. The budget is in a temporary state of imbalance

Answer: D

 

NEW QUESTION 55
Creating a secondary authentication process for network access would be an example of?

• A. Putting undue time commitment on the system administrator.
• B. Supporting the concept of layered security
• C. Network segmentation.
• D. An administrator with too much time on their hands.

Answer: B

 

NEW QUESTION 56
Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates.
When multiple regulations or standards apply to your industry you should set controls to meet the:

• A. Most complex standard to implement
• B. Stricter regulation or standard
• C. Recommendations of your Legal Staff
• D. Easiest regulation or standard to implement

Answer: D

 

NEW QUESTION 57
What is meant by password aging?

• A. Time in seconds a user is allocated to change a password
• B. A Single Sign-On requirement
• C. The amount of time it takes for a password to activate
• D. An expiration date set for passwords

Answer: A

Explanation:
Reference: https://medical-dictionary.thefreedictionary.com/password+ageing

 

NEW QUESTION 58
Acceptable levels of information security risk tolerance in an organization should be determined by?

• A. Corporate legal counsel
• B. Corporate compliance committee
• C. CISO with reference to the company goals
• D. CEO and board of director

Answer: D

 

NEW QUESTION 59
SCENARIO: A CISO has several two-factor authentication systems under review and selects the one that is most sufficient and least costly. The implementation project planning is completed and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization's needs.
The CISO is unsure of the information provided and orders a vendor proof of concept to validate the system's scalability. This demonstrates which of the following?

• A. An approach providing minimum time impact to the implementation schedules
• B. A methodology-based approach to ensure authentication mechanism functions
• C. A risk-based approach to determine if the solution is suitable for investment
• D. An approach that allows for minimum budget impact if the solution is unsuitable

Answer: C

 

NEW QUESTION 60
......

Verified 512-50 Exam Dumps Q&As - Provide 512-50 with Correct Answers: https://www.testsimulate.com/512-50-study-materials.html