ECCouncil 312-50 Exam Made Easy: Step-by-Step Preparation Guide

Say nothing and continue with the security testing.

Stop work immediately and contact the authorities.

Delete the pornography, say nothing, and continue security testing.

Bring the discovery to the financial organization's human resource department.

Ignore the problem completely and let someone else deal with it.

Create a document that will crash the computer when opened and send it to friends.

Find an underground bulletin board and attempt to sell the bug to the highest bidder.

Notify the vendor of the bug and do not disclose it until the vendor gets a chance to issue a fix.

At least once a year and after any significant upgrade or modification

At least once every three years or after any significant upgrade or modification

At least twice a year or after any significant upgrade or modification

At least once every two years and after any significant upgrade or modification

Regulatory compliance

Peer review

Change management

Penetration testing

Sarbanes-Oxley Act (SOX)

Gramm-Leach-Bliley Act (GLBA)

Fair and Accurate Credit Transactions Act (FACTA)

Federal Information Security Management Act (FISMA)

Process

Procedure

Policy

Paradigm

guidelines and practices for security controls.

financial soundness and business viability metrics.

standard best practice for configuration management.

contract agreement writing standards.

Penetration testing

Social engineering

Vulnerability scanning

Access control list reviews

Employers promote monitoring activities of employees as long as the employees demonstrate trustworthiness.

Employers use informal verbal communication channels to explain employee monitoring activities to employees.

Employers use network surveillance to monitor employee email traffic, network access, and to record employee keystrokes.

Employers provide employees written statements that clearly discuss the boundaries of monitoring activities and consequences.

By implementing written security procedures, enabling employee security training, and promoting the benefits of security

By using informal networks of communication, establishing secret passing procedures, and immediately terminating employees

By sharing security secrets with employees, enabling employees to share secrets, and establishing a consultative help line

By decreasing an employee's vacation time, addressing ad-hoc employment clauses, and ensuring that managers know employee strengths