[2022年05月]更新のEC-COUNCIL 712-50問題集厳選された問題集でパスして、最短時間を目指そう
EC-COUNCIL 712-50試験問題集で[2022年最新] 練習 高合格率な試験問題集問題
EC-COUNCIL 712-50 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
質問 241
Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and dat a. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN.
Once supervisors and data owners have approved requests, information system administrators will implement
- A. Operational control(s)
- B. Technical control(s)
- C. Policy control(s)
- D. Management control(s)
正解: B
質問 242
Michael starts a new job and discovers that he has unnecessary access to a variety of systems. Which of the following best describes the problem he has encountered?
- A. Rights collision
- B. Least privileges
- C. Privilege creep
- D. Excessive privileges
正解: D
質問 243
A global health insurance company is concerned about protecting confidential information.
Which of the following is of MOST concern to this organization?
- A. Compliance with patient data protection regulations for each country where they operate.
- B. Alignment with financial reporting regulations for each country where they operate.
- C. Compliance to the payment Card Industry (PCI) regulations.
- D. Alignment with International Organization for Standardization (ISO) standards.
正解: A
質問 244
Scenario: Your program is developed around minimizing risk to information by focusing on people, technology, and operations.
You have decided to deal with risk to information from people first. How can you minimize risk to your most sensitive information before granting access?
- A. Monitor employee browsing and surfing habits
- B. Conduct background checks on individuals before hiring them
- C. Develop an Information Security Awareness program
- D. Set your firewall permissions aggressively and monitor logs regularly.
正解: B
質問 245
When selecting a security solution with reoccurring maintenance costs after the first year
- A. Defer selection until the market improves and cash flow is positive
- B. Implement the solution and ask for the increased operating cost budget when it is time
- C. Communicate future operating costs to the CIO/CFO and seek commitment from them to ensure the new solution's continued use
- D. The CISO should cut other essential programs to ensure the new solution's continued use
正解: C
質問 246
What is the MAIN reason for conflicts between Information Technology and Information Security programs?
- A. Security governance defines technology best practices and Information Technology governance does not.
- B. The effective implementation of security controls can be viewed as an inhibitor to rapid Information technology implementations.
- C. Technology governance defines technology policies and standards while security governance does not.
- D. Technology Governance is focused on process risks whereas Security Governance is focused on business risk.
正解: B
質問 247
You are just hired as the new CISO and are being briefed on all the Information Security projects that your section has on going. You discover that most projects are behind schedule and over budget.
Using the best business practices for project management you determine that the project correctly aligns with the company goals and the scope of the project is correct. What is the NEXT step?
- A. Verify resources
- B. Verify budget
- C. Review time schedules
- D. Verify constraints
正解: A
質問 248
Step-by-step procedures to regain normalcy in the event of a major earthquake is PRIMARILY covered by which of the following plans?
- A. Business Continuity plan
- B. Incident response plan
- C. Disaster recovery plan
- D. Damage control plan
正解: C
質問 249
The new CISO was informed of all the Information Security projects that the organization has in progress. Two projects are over a year behind schedule and over budget. Using best business practices for project management you determine that the project correctly aligns with the company goals.
Which of the following needs to be performed NEXT?
- A. Verify capacity constraints
- B. Verify the regulatory requirements
- C. Verify technical resources
- D. Verify the scope of the project
正解: C
質問 250
Scenario: You are the CISO and have just completed your first risk assessment for your organization. You find many risks with no security controls, and some risks with inadequate controls. You assign work to your staff to create or adjust existing security controls to ensure they are adequate for risk mitigation needs.
When formulating the remediation plan, what is a required input?
- A. Latest virus definitions file
- B. Risk assessment
- C. Patching history
- D. Board of directors
正解: B
質問 251
ABC Limited has recently suffered a security breach with customers' social security number available on the dark web for sale. The CISO, during the time of the incident, has been fired, and you have been hired as the replacement. The analysis of the breach found that the absence of an insider threat program, lack of least privilege policy, and weak access control was to blame. You would like to implement key performance indicators to mitigate the risk.
Which metric would meet the requirement?
- A. Number of users with elevated privileges
- B. Number of websites with weak or misconfigured certificates
- C. Number of times third parties access critical information systems
- D. Number of systems with known vulnerabilities
正解: A
質問 252
Network Forensics is the prerequisite for any successful legal action after attacks on your Enterprise Network. Which is the single most important factor to introducing digital evidence into a court of law?
- A. Uninterrupted Chain of Custody
- B. Comprehensive Log-Files from all servers and network devices affected during the attack
- C. Expert forensics witness
- D. Fully trained network forensic experts to analyze all data right after the attack
正解: A
質問 253
A global health insurance company is concerned about protecting confidential information. Which of the following is of MOST concern to this organization?
- A. Compliance with patient data protection regulations for each country where they operate.
- B. Alignment with financial reporting regulations for each country where they operate.
- C. Alignment with International Organization for Standardization (ISO) standards.
- D. Compliance to the Payment Card Industry (PCI) regulations.
正解: A
質問 254
The Information Security Governance program MUST:
- A. integrate with other organizational governance processes
- B. integrate with other organizational governance processes
- C. support user choice for Bring Your Own Device (BYOD)
- D. show a return on investment for the organization
正解: A
質問 255
The PRIMARY objective for information security program development should be:
- A. Establishing incident response programs.
- B. Establishing strategic alignment with bunsiness continuity requirements
- C. Reducing the impact of the risk to the business.
- D. Identifying and implementing the best security solutions.
正解: C
質問 256
The PRIMARY objective for information security program development should be:
- A. Establishing incident response programs.
- B. Establishing strategic alignment with bunsiness continuity requirements
- C. Reducing the impact of the risk to the business.
- D. Identifying and implementing the best security solutions.
正解: C
質問 257
Which of the following best describes revenue?
- A. The sum value of all assets and cash flow into the business
- B. Non-operating financial liabilities minus expenses
- C. The economic benefit derived by operating a business
- D. The true profit-making potential of an organization
正解: C
質問 258
SCENARIO: A CISO has several two-factor authentication systems under review and
selects the one that is most sufficient and least costly. The implementation project planning is completed and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization's needs.
What is the MOST logical course of action the CISO should take?
- A. Cancel the project if the business need was based on internal requirements versus regulatory compliance requirements
- B. Continue with the implementation and submit change requests to the vendor in order to ensure required functionality will be provided when needed
- C. Continue with the project until the scalability issue is validated by others, such as an auditor or third party assessor
- D. Review the original solution set to determine if another system would fit the organization's risk appetite and budget regulatory compliance requirements
正解: D
質問 259
When creating contractual agreements and procurement processes why should security requirements be included?
- A. To make sure the patching process is included with the costs
- B. To make sure the costs of security is included and understood
- C. To make sure they are added on after the process is completed
- D. To make sure the security process aligns with the vendor's security process
正解: B
解説:
Scenario1
質問 260
The process for identifying, collecting, and producing digital information in support of legal proceedings is called _____________________________.
- A. evidence tampering
- B. electronic review
- C. chain of custody
- D. electronic discovery
正解: D
質問 261
Which of the following functions evaluates risk present in IT initiatives and/or systems when implementing an information security program?
- A. Vulnerability Assessment
- B. Risk Management
- C. Risk Assessment
- D. System Testing
正解: C
質問 262
At what level of governance are individual projects monitored and managed?
- A. Milestone
- B. Program
- C. Portfolio
- D. Enterprise
正解: C
質問 263
The success of the Chief Information Security Officer is MOST dependent upon:
- A. favorable audit findings
- B. raising awareness of security issues with end users
- C. following the recommendations of consultants and contractors
- D. development of relationships with organization executives
正解: D
質問 264
......
712-50試験問題集でPDF合格保証 成功は正確かつ更新された問題：https://jp.fast2test.com/712-50-premium-file.html
712-50問題集-[最新2022]EC-COUNCIL試験問題集を掴み取れ：https://drive.google.com/open?id=1wfm2vsiOJlv6YIj46m3TvhgkIfhuUkyh