Free EC-COUNCIL 512-50 Exam Dumps Questions & Answers

A business unit within your organization intends to deploy a new technology in a manner that places it in violation of existing information security standards. What immediate action should the information security manager take?

• A.  Enforce the existing security standards and do not allow the deployment of the new technology.
• B.  If the risks associated with that technology are not already identified, perform a risk analysis to quantify the risk, and allow the business unit to proceed based on the identified risk level.
• C.  Amend the standard to permit the deployment.
• D.  Permit a 90-day window to see if an issue occurs and then amend the standard if there are no issues.

Many times a CISO may have to speak to the Board of Directors (BOD) about their cyber security posture.
What would be the BEST choice of security metrics to present to the BOD?

• A.  All vulnerabilities that impact important production servers
• B.  All vulnerabilities found on servers and desktops
• C.  Only critical and high vulnerabilities that impact important production servers
• D.  Only critical and high vulnerabilities on servers and desktops

Which of the following should be determined while defining risk management strategies?

• A.  Enterprise disaster recovery plans
• B.  Risk assessment criteria
• C.  IT architecture complexity
• D.  Organizational objectives and risk tolerance

Your organization provides open guest wireless access with no captive portals. What can you do to assist with law enforcement investigations if one of your guests is suspected of committing an illegal act using your network?

• A.  Install a firewall software on each wireless access point.
• B.  Provide IP and MAC address
• C.  Disable SSID Broadcast and enable MAC address filtering on all wireless access points.
• D.  Configure logging on each access point

Dataflow diagrams are used by IT auditors to:

• A.  Order data hierarchically.
• B.  Graphically summarize data paths and storage processes.
• C.  Highlight high-level data definitions.
• D.  Portray step-by-step details of data generation.