ECCouncil 712-50 (EC-Council Certified CISO) Practice Test 48

Question 470

Former facility contractors remain on the access list months after their projects end. What approach should the accountable team prioritize?

  1. Security guard response protocol
  2. Physical access recertification
  3. Electronic badge access
  4. Biometric access with fallback

Explanation

Correct Answer

B:

Periodic reviews compare active badges with approved employment and work authorization. By contrast, Security guard response protocol is relevant when an alarm sounds at a restricted entrance but responders have no consistent verification process, not as a substitute for Physical access recertification in this case.

Incorrect Answers

A:

A response protocol defines safe checks, escalation, evidence retention, and incident handling; deploying it would matter if an alarm sounds at a restricted entrance but responders have no consistent verification process, but the deciding issue here is that former facility contractors remain on the access list months after their projects end.

C:

Badge systems bind identities to defined door permissions and log access events; deploying it would matter if only authorized research staff should enter sensitive laboratory corridors, but the deciding issue here is that former facility contractors remain on the access list months after their projects end.

D:

Biometrics add a possession or inherence check but need accessible alternative and protected templates; the condition under which it applies is that a vault requires stronger identity verification but injuries may prevent some biometric scans, unlike the condition in the question, where former facility contractors remain on the access list months after their projects end.

Question 471

An alarm sounds at a restricted entrance but responders have no consistent verification process. What is the best-targeted intervention?

  1. Security guard response protocol
  2. Visitor escort policy
  3. Perimeter intrusion sensors
  4. Biometric access with fallback

Explanation

Correct Answer

A:

A response protocol defines safe checks, escalation, evidence retention, and incident handling. By contrast, Visitor escort policy is relevant when temporary guests must enter approved areas without gaining unsupervised laboratory access, not as a substitute for Security guard response protocol in this case.

Incorrect Answers

B:

Escort procedures preserve accountability for guest movement and controlled access; it would be a fit if temporary guests must enter approved areas without gaining unsupervised laboratory access, whereas the required response must deal with the fact that an alarm sounds at a restricted entrance but responders have no consistent verification process.

C:

Perimeter sensors detect suspicious crossing attempts and trigger investigation; deploying it would matter if a remote compound is vulnerable to undetected access through unstaffed fences, but the deciding issue here is that an alarm sounds at a restricted entrance but responders have no consistent verification process.

D:

Biometrics add a possession or inherence check but need accessible alternative and protected templates; that is relevant if a vault requires stronger identity verification but injuries may prevent some biometric scans, but it does not directly resolve the need arising when an alarm sounds at a restricted entrance but responders have no consistent verification process.

Question 472

A remote compound is vulnerable to undetected access through unstaffed fences. What should the decision-maker choose?

  1. Mantrap entry control
  2. Visitor escort policy
  3. Electronic badge access
  4. Perimeter intrusion sensors

Explanation

Correct Answer

D:

Perimeter sensors detect suspicious crossing attempts and trigger investigation. By contrast, Visitor escort policy is relevant when temporary guests must enter approved areas without gaining unsupervised laboratory access, not as a substitute for Perimeter intrusion sensors in this case.

Incorrect Answers

A:

Interlocked doors regulate entry and reduce simultaneous unauthorized passage; the alternative concern is that visitors can tailgate directly into a high-value data-processing room, but the tested need stems from the fact that a remote compound is vulnerable to undetected access through unstaffed fences.

B:

Escort procedures preserve accountability for guest movement and controlled access; its proper use case is one in which temporary guests must enter approved areas without gaining unsupervised laboratory access, not one in which a remote compound is vulnerable to undetected access through unstaffed fences.

C:

Badge systems bind identities to defined door permissions and log access events; its proper use case is one in which only authorized research staff should enter sensitive laboratory corridors, not one in which a remote compound is vulnerable to undetected access through unstaffed fences.

Question 473

An enterprise data center must withstand local environmental and infrastructure failures. A single utility feeder outage would stop the organization's critical computing service. What is the best-targeted intervention?

  1. Redundant power path
  2. Water leak monitoring
  3. Environmental sensor alarms
  4. Secure equipment disposal

Explanation

Correct Answer

A:

Independent power paths and transfer equipment mitigate a common supply interruption. By contrast, Secure equipment disposal is relevant when discarded storage devices may still contain sensitive customer records, not as a substitute for Redundant power path in this case.

Incorrect Answers

B:

Leak detection supports early isolation before water damages infrastructure; this is pertinent when equipment racks are located below plumbing with limited visibility of developing leaks, in contrast with the actual gap where a single utility feeder outage would stop the organization's critical computing service.

C:

Temperature and humidity monitoring alerts when conditions approach equipment operating limits; this provides its benefit when cooling failures could overheat servers before operators notice; the matter at hand is instead that a single utility feeder outage would stop the organization's critical computing service.

D:

Sanitization or destruction appropriate to media type prevents recovery after disposal; such an effect addresses a situation where discarded storage devices may still contain sensitive customer records rather than the situation where a single utility feeder outage would stop the organization's critical computing service.

Question 474

Servers need clean temporary power while generators start after an outage. What should the decision-maker choose?

  1. Water leak monitoring
  2. CCTV retention governance
  3. Physical asset tagging
  4. Uninterruptible power supply
  5. Secure equipment disposal

Explanation

Correct Answer

D:

A UPS bridges short power gaps and conditions electrical supply within its rated capacity. By contrast, CCTV retention governance is relevant when camera footage is collected but investigators cannot retrieve recordings for the required period, not as a substitute for Uninterruptible power supply in this case.

Incorrect Answers

A:

Leak detection supports early isolation before water damages infrastructure; it would be a fit if equipment racks are located below plumbing with limited visibility of developing leaks, whereas the required response must deal with the fact that servers need clean temporary power while generators start after an outage.

B:

Retention governance balances forensic need, privacy rules, access controls, and deletion schedules; such an effect addresses a situation where camera footage is collected but investigators cannot retrieve recordings for the required period rather than the situation where servers need clean temporary power while generators start after an outage.

C:

Asset tags and reconciled inventories support custody, maintenance, and incident investigation; this is pertinent when operations cannot locate high-value equipment transferred between sites, in contrast with the actual gap where servers need clean temporary power while generators start after an outage.

E:

Sanitization or destruction appropriate to media type prevents recovery after disposal; this provides its benefit when discarded storage devices may still contain sensitive customer records; the matter at hand is instead that servers need clean temporary power while generators start after an outage.

Question 475

A critical equipment room needs early fire detection without relying on water discharge over electronics. What action would satisfy this constraint most directly?

  1. Water leak monitoring
  2. Uninterruptible power supply
  3. Fire detection and clean-agent suppression
  4. Secure equipment disposal
  5. Environmental sensor alarms
  6. Redundant power path

Explanation

Correct Answer

C:

Appropriate sensors and engineered suppression reduce fire impact while protecting personnel safety. By contrast, Secure equipment disposal is relevant when discarded storage devices may still contain sensitive customer records, not as a substitute for Fire detection and clean-agent suppression in this case.

Incorrect Answers

A:

Leak detection supports early isolation before water damages infrastructure; its proper use case is one in which equipment racks are located below plumbing with limited visibility of developing leaks, not one in which a critical equipment room needs early fire detection without relying on water discharge over electronics.

B:

A UPS bridges short power gaps and conditions electrical supply within its rated capacity; such an effect addresses a situation where servers need clean temporary power while generators start after an outage rather than the situation where a critical equipment room needs early fire detection without relying on water discharge over electronics.

D:

Sanitization or destruction appropriate to media type prevents recovery after disposal; that is relevant if discarded storage devices may still contain sensitive customer records, but it does not directly resolve the need arising when a critical equipment room needs early fire detection without relying on water discharge over electronics.

E:

Temperature and humidity monitoring alerts when conditions approach equipment operating limits; such an effect addresses a situation where cooling failures could overheat servers before operators notice rather than the situation where a critical equipment room needs early fire detection without relying on water discharge over electronics.

F:

Independent power paths and transfer equipment mitigate a common supply interruption; its proper use case is one in which a single utility feeder outage would stop the organization's critical computing service, not one in which a critical equipment room needs early fire detection without relying on water discharge over electronics.

Question 476

Equipment racks are located below plumbing with limited visibility of developing leaks. What approach should the accountable team prioritize?

  1. Water leak monitoring
  2. CCTV retention governance
  3. Physical asset tagging
  4. Fire detection and clean-agent suppression

Explanation

Correct Answer

A:

Leak detection supports early isolation before water damages infrastructure. By contrast, Fire detection and clean-agent suppression is relevant when a critical equipment room needs early fire detection without relying on water discharge over electronics, not as a substitute for Water leak monitoring in this case.

Incorrect Answers

B:

Retention governance balances forensic need, privacy rules, access controls, and deletion schedules; that is relevant if camera footage is collected but investigators cannot retrieve recordings for the required period, but it does not directly resolve the need arising when equipment racks are located below plumbing with limited visibility of developing leaks.

C:

Asset tags and reconciled inventories support custody, maintenance, and incident investigation; the condition for this measure is that operations cannot locate high-value equipment transferred between sites, whereas the current question concerns a case where equipment racks are located below plumbing with limited visibility of developing leaks.

D:

Appropriate sensors and engineered suppression reduce fire impact while protecting personnel safety; such an effect addresses a situation where a critical equipment room needs early fire detection without relying on water discharge over electronics rather than the situation where equipment racks are located below plumbing with limited visibility of developing leaks.

Question 477

Cooling failures could overheat servers before operators notice. What is the best-targeted intervention?

  1. Environmental sensor alarms
  2. CCTV retention governance
  3. Physical asset tagging
  4. Redundant power path

Explanation

Correct Answer

A:

Temperature and humidity monitoring alerts when conditions approach equipment operating limits. By contrast, CCTV retention governance is relevant when camera footage is collected but investigators cannot retrieve recordings for the required period, not as a substitute for Environmental sensor alarms in this case.

Incorrect Answers

B:

Retention governance balances forensic need, privacy rules, access controls, and deletion schedules; that helps with the separate case where camera footage is collected but investigators cannot retrieve recordings for the required period, not with the issue that cooling failures could overheat servers before operators notice.

C:

Asset tags and reconciled inventories support custody, maintenance, and incident investigation; the alternative concern is that operations cannot locate high-value equipment transferred between sites, but the tested need stems from the fact that cooling failures could overheat servers before operators notice.

D:

Independent power paths and transfer equipment mitigate a common supply interruption; that helps with the separate case where a single utility feeder outage would stop the organization's critical computing service, not with the issue that cooling failures could overheat servers before operators notice.

Question 478

Discarded storage devices may still contain sensitive customer records. What should the decision-maker choose?

  1. Environmental sensor alarms
  2. Secure equipment disposal
  3. Water leak monitoring
  4. Redundant power path

Explanation

Correct Answer

B:

Sanitization or destruction appropriate to media type prevents recovery after disposal. By contrast, Redundant power path is relevant when a single utility feeder outage would stop the organization's critical computing service, not as a substitute for Secure equipment disposal in this case.

Incorrect Answers

A:

Temperature and humidity monitoring alerts when conditions approach equipment operating limits; that helps with the separate case where cooling failures could overheat servers before operators notice, not with the issue that discarded storage devices may still contain sensitive customer records.

C:

Leak detection supports early isolation before water damages infrastructure; this provides its benefit when equipment racks are located below plumbing with limited visibility of developing leaks; the matter at hand is instead that discarded storage devices may still contain sensitive customer records.

D:

Independent power paths and transfer equipment mitigate a common supply interruption; this provides its benefit when a single utility feeder outage would stop the organization's critical computing service; the matter at hand is instead that discarded storage devices may still contain sensitive customer records.

Question 479

Camera footage is collected but investigators cannot retrieve recordings for the required period. What action would satisfy this constraint most directly?

  1. Physical asset tagging
  2. CCTV retention governance
  3. Water leak monitoring
  4. Environmental sensor alarms

Explanation

Correct Answer

B:

Retention governance balances forensic need, privacy rules, access controls, and deletion schedules. By contrast, Physical asset tagging is relevant when operations cannot locate high-value equipment transferred between sites, not as a substitute for CCTV retention governance in this case.

Incorrect Answers

A:

Asset tags and reconciled inventories support custody, maintenance, and incident investigation; its proper use case is one in which operations cannot locate high-value equipment transferred between sites, not one in which camera footage is collected but investigators cannot retrieve recordings for the required period.

C:

Leak detection supports early isolation before water damages infrastructure; deploying it would matter if equipment racks are located below plumbing with limited visibility of developing leaks, but the deciding issue here is that camera footage is collected but investigators cannot retrieve recordings for the required period.

D:

Temperature and humidity monitoring alerts when conditions approach equipment operating limits; the condition under which it applies is that cooling failures could overheat servers before operators notice, unlike the condition in the question, where camera footage is collected but investigators cannot retrieve recordings for the required period.

Question 480

Operations cannot locate high-value equipment transferred between sites. What approach should the accountable team prioritize?

  1. CCTV retention governance
  2. Environmental sensor alarms
  3. Fire detection and clean-agent suppression
  4. Physical asset tagging
  5. Secure equipment disposal

Explanation

Correct Answer

D:

Asset tags and reconciled inventories support custody, maintenance, and incident investigation. By contrast, Secure equipment disposal is relevant when discarded storage devices may still contain sensitive customer records, not as a substitute for Physical asset tagging in this case.

Incorrect Answers

A:

Retention governance balances forensic need, privacy rules, access controls, and deletion schedules; that helps with the separate case where camera footage is collected but investigators cannot retrieve recordings for the required period, not with the issue that operations cannot locate high-value equipment transferred between sites.

B:

Temperature and humidity monitoring alerts when conditions approach equipment operating limits; this is pertinent when cooling failures could overheat servers before operators notice, in contrast with the actual gap where operations cannot locate high-value equipment transferred between sites.

C:

Appropriate sensors and engineered suppression reduce fire impact while protecting personnel safety; the condition under which it applies is that a critical equipment room needs early fire detection without relying on water discharge over electronics, unlike the condition in the question, where operations cannot locate high-value equipment transferred between sites.

E:

Sanitization or destruction appropriate to media type prevents recovery after disposal; the condition for this measure is that discarded storage devices may still contain sensitive customer records, whereas the current question concerns a case where operations cannot locate high-value equipment transferred between sites.

EC-Council Certified CISO (712-50) Practice Tests