Free EC-COUNCIL 312-50v10 Exam Dumps Questions & Answers

Which United States legislation mandates that the Chief Executive Officer (CEO) and the Chief Financial Officer (CFO) must sign statements verifying the completeness and accuracy of financial reports?

• A.  Gramm-Leach-Bliley Act (GLBA)
• B.  Fair and Accurate Credit Transactions Act (FACTA)
• C.  Sarbanes-Oxley Act (SOX)
• D.  Federal Information Security Management Act (FISMA)

A recent security audit revealed that there were indeed several occasions that the company's network was breached. After investigating, you discover that your IDS is not configured properly and therefore is unable to trigger alarms when needed. What type of alert is the IDS giving?

• A.  False Positive
• B.  False Negative
• C.  True Positive
• D.  False Positive

A computer technician is using a new version of a word processing software package when it is discovered that a special sequence of characters causes the entire computer to crash. The technician researches the bug and discovers that no one else experienced the problem. What is the appropriate next step?

• A.  Find an underground bulletin board and attempt to sell the bug to the highest bidder.
• B.  Notify the vendor of the bug and do not disclose it until the vendor gets a chance to issue a fix.
• C.  Ignore the problem completely and let someone else deal with it.
• D.  Create a document that will crash the computer when opened and send it to friends.

A network administrator received an administrative alert at 3:00 a.m. from the intrusion detection system. The alert was generated because a large number of packets were coming into the network over ports 20 and 21.
During analysis, there were no signs of attack on the FTP servers. How should the administrator classify this situation?

• A.  False positives
• B.  False negatives
• C.  True positives
• D.  True negatives

What is the best defense against privilege escalation vulnerability?

• A.  Review user roles and administrator privileges for maximum utilization of automation services.
• B.  Patch systems regularly and upgrade interactive login privileges at the system administrator level.
• C.  Run administrator and applications on least privileges and use a content registry for tracking.
• D.  Run services with least privileged accounts and implement multi-factor authentication and authorization.