Real EC-COUNCIL 512-50 Exam Dumps with Correct 402 Questions and Answers [Q203-Q220]

Q203. A severe security threat has been detected on your corporate network. As CISO you quickly assemble key members of the Information Technology team and business operations to determine a modification to security controls in response to the threat. This is an example of:

Q204. The Information Security Management program MUST protect:

Q205. Which of the following can the company implement in order to avoid this type of security issue in the future?

Q206. While designing a secondary data center for your company what document needs to be analyzed to determine to how much should be spent on building the data center?

Q207. Your IT auditor is reviewing significant events from the previous year and has identified some procedural oversights. Which of the following would be the MOST concerning?

Q208. SQL injection is a very popular and successful injection attack method. Identify the basic SQL injection text:

Q209. What is the MAIN reason for conflicts between Information Technology and Information Security programs?

Q210. The Information Security Governance program MUST:

Q211. Risk is defined as:

Q212. Which of the following international standards can be BEST used to define a Risk Management process in an organization?

Q213. Your incident handling manager detects a virus attack in the network of your company. You develop a signature based on the characteristics of the detected virus. Which of the following phases in the incident handling process will utilize the signature to resolve this incident?

Q214. According to the National Institute of Standards and Technology (NIST) SP 800-40, which of the following considerations are MOST important when creating a vulnerability management program?

Q215. Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.
Which of the following frameworks and standards will BEST fit the organization as a baseline for their security program?

Q216. A missing/ineffective security control is identified. Which of the following should be the NEXT step?

Q217. Scenario: Your program is developed around minimizing risk to information by focusing on people, technology, and operations.
An effective way to evaluate the effectiveness of an information security awareness program for end users, especially senior executives, is to conduct periodic:

Q218. Scenario: You are the CISO and have just completed your first risk assessment for your organization. You find many risks with no security controls, and some risks with inadequate controls. You assign work to your staff to create or adjust existing security controls to ensure they are adequate for risk mitigation needs.
You have identified potential solutions for all of your risks that do not have security controls. What is the NEXT step?

Q219. The Annualized Loss Expectancy (Before) minus Annualized Loss Expectancy (After) minus Annual Safeguard Cost is the formula for determining:

Q220. Which of the following functions implements and oversees the use of controls to reduce risk when creating an information security program?