Pearson 512-50 New Attempt

EC-Council Information Security Manager (E|ISM) Questions and Answers

Question 33

Which of the following is the MOST logical method of deploying security controls within an organization?

Obtain funding for all desired controls and then create project plans for implementation

Apply the simpler controls as quickly as possible and use a risk-based approach for the more difficult and

costly controls

Apply the least costly controls to demonstrate positive program activity

Obtain business unit buy-in through close communication and coordination

Question 34

Which of the following best describes the sensors designed to project and detect a light beam across an area?

Smoke

Thermal

Air-aspirating

Photo electric

Question 35

Access Control lists (ACLs), Firewalls, and Intrusion Prevention Systems are examples of

Network based security preventative controls

Software segmentation controls

Network based security detective controls

User segmentation controls

Question 36

Bob waits near a secured door, holding a box. He waits until an employee walks up to the secured door and

uses the special card in order to access the restricted area of the target company. Just as the employee opens

the door, Bob walks up to the employee (still holding the box) and asks the employee to hold the door open so

that he can enter. What is the best way to undermine the social engineering activity of tailgating?

Post a sign that states, “no tailgating” next to the special card reader adjacent to the secure door

Issue special cards to access secure doors at the company and provide a one-time only brief description of

use of the special card

Educate and enforce physical security policies of the company to all the employees on a regular basis

Setup a mock video camera next to the special card reader adjacent to the secure door