EC-COUNCIL 512-50 問題集

質問 1：
When gathering security requirements for an automated business process improvement program, which of the following is MOST important?
A. Type of encryption required for the data once it is at rest
B. Type of data contained in the process/system
C. Type of connection/protocol used to transfer the data
D. Type of computer the data is processed on
正解：B

質問 2：
An international organization is planning a project to implement encryption technologies to protect company confidential information. This organization has data centers on three continents. Which of the following would be considered a MAJOR constraint for the project?
A. Encryption import/export regulations
B. Local customer privacy laws
C. Time zone differences
D. Compliance to local hiring laws
正解：A

質問 3：
A key cybersecurity feature of a Personal Identification Verification (PIV) Card is:
A. It has the user's photograph to help ID them
B. It can be used as a secure flash drive
C. It can double as physical identification at the DMV
D. Inability to export the private certificate/key
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Scenario: You are the CISO and have just completed your first risk assessment for your organization. You find many risks with no security controls, and some risks with inadequate controls. You assign work to your staff to create or adjust existing security controls to ensure they are adequate for risk mitigation needs.
You have identified potential solutions for all of your risks that do not have security controls. What is the NEXT step?
A. Create a risk metrics for all unmitigated risks
B. Screen potential vendor solutions
C. Verify that the cost of mitigation is less than the risk
D. Get approval from the board of directors
正解：C

質問 5：
Your penetration testing team installs an in-line hardware key logger onto one of your network machines.
Which of the following is of major concern to the security organization?
A. In-line hardware keyloggers are undetectable by software
B. In-line hardware keyloggers are relatively inexpensive
C. In-line hardware keyloggers don't require physical access
D. In-line hardware keyloggers don't comply to industry regulations
正解：A

質問 6：
Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.
The organization has already been subject to a significant amount of credit card fraud. Which of the following is the MOST likely reason for this fraud?
A. Lack of technical controls when dealing with credit card data
B. Lack of compliance to the Payment Card Industry (PCI) standards
C. Security practices not in alignment with ISO 27000 frameworks
D. Ineffective security awareness program
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Developing effective security controls is a balance between:
A. Operations and Regulations
B. Corporate Culture and Job Expectations
C. Risk Management and Operations
D. Technology and Vendor Management
正解：C

質問 8：
A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization. Which of the following principles does this best demonstrate?
A. Leveraging existing implementations
B. Alignment with the business
C. Effective use of existing technologies
D. Proper budget management
正解：B

質問 9：
According to ISO 27001, of the steps for establishing an Information Security Governance program listed below, which comes first?
A. Identify threats, risks, impacts and vulnerabilities
B. Decide how to manage risk
C. Define the budget of the Information Security Management System
D. Define Information Security Policy
正解：D