Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
ECCouncil
Certified Ethical Hacker
312-50
Certified Ethical Hacker Exam Questions and Answers

Pass the ECCouncil Certified Ethical Hacker 312-50 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam 312-50 Premium Access

View all detail and faqs for the 312-50 exam

Go to Exam

808 Students Passed

89% Average Score

90% Same Questions

Viewing page 8 out of 12 pages

Viewing questions 71-80 out of questions

Questions # 71:

Which of the following guidelines or standards is associated with the credit card industry?

Options:

Control Objectives for Information and Related Technology (COBIT)

Sarbanes-Oxley Act (SOX)

Health Insurance Portability and Accountability Act (HIPAA)

Payment Card Industry Data Security Standards (PCI DSS)

Answer

Questions # 72:

Which method can provide a better return on IT security investment and provide a thorough and comprehensive assessment of organizational security covering policy, procedure design, and implementation?

Options:

Penetration testing

Social engineering

Vulnerability scanning

Access control list reviews

Answer

Questions # 73:

Which of the following ensures that updates to policies, procedures, and configurations are made in a controlled and documented fashion?

Options:

Regulatory compliance

Peer review

Change management

Penetration testing

Answer

Questions # 74:

How do employers protect assets with security policies pertaining to employee surveillance activities?

Options:

Employers promote monitoring activities of employees as long as the employees demonstrate trustworthiness.

Employers use informal verbal communication channels to explain employee monitoring activities to employees.

Employers use network surveillance to monitor employee email traffic, network access, and to record employee keystrokes.

Employers provide employees written statements that clearly discuss the boundaries of monitoring activities and consequences.

Answer

Questions # 75:

Which United States legislation mandates that the Chief Executive Officer (CEO) and the Chief Financial Officer (CFO) must sign statements verifying the completeness and accuracy of financial reports?

Options:

Sarbanes-Oxley Act (SOX)

Gramm-Leach-Bliley Act (GLBA)

Fair and Accurate Credit Transactions Act (FACTA)

Federal Information Security Management Act (FISMA)

Answer

Questions # 76:

Which of the following tools would be the best choice for achieving compliance with PCI Requirement 11?

Options:

Truecrypt

Sub7

Nessus

Clamwin

Answer

Questions # 77:

Which type of security document is written with specific step-by-step details?

Options:

Process

Procedure

Policy

Paradigm

Answer

Questions # 78:

When does the Payment Card Industry Data Security Standard (PCI-DSS) require organizations to perform external and internal penetration testing?

Options:

At least once a year and after any significant upgrade or modification

At least once every three years or after any significant upgrade or modification

At least twice a year or after any significant upgrade or modification

At least once every two years and after any significant upgrade or modification

Answer

Questions # 79:

International Organization for Standardization (ISO) standard 27002 provides guidance for compliance by outlining

Options:

guidelines and practices for security controls.

financial soundness and business viability metrics.

standard best practice for configuration management.

contract agreement writing standards.

Answer

Questions # 80:

A security consultant is trying to bid on a large contract that involves penetration testing and reporting. The company accepting bids wants proof of work so the consultant prints out several audits that have been performed. Which of the following is likely to occur as a result?