How to Easily Pass the ECCouncil 512-50 Exam: Expert Advice

Systems logs

Hardware error reports

Utilization reports

Availability reports

Single loss expectancy multiplied by the annual rate of occurrence

Total loss expectancy multiplied by the total loss frequency

Value of the asset multiplied by the loss expectancy

Replacement cost multiplied by the single loss expectancy

Lack of notification to the public of disclosure of confidential information.

Lack of periodic examination of access rights

Failure to notify police of an attempted intrusion

Lack of reporting of a successful denial of service attack on the network.

All vulnerabilities found on servers and desktops

Only critical and high vulnerabilities on servers and desktops

Only critical and high vulnerabilities that impact important production servers

All vulnerabilities that impact important production servers

Determining the likelihood that vulnerable systems will be attacked by specific threats

Calculating the risks to which assets are exposed in their current setting

Assigning a value to each information asset

Assessing the relative risk facing the organization’s information assets

An Information Security audit standard

An audit guideline for certifying secure systems and controls

A framework for Information Technology management and governance

A set of international regulations for Information Technology governance

Identifying the risk

Finding economic balance between the impact of the risk and the cost of the control

Identifying the victim of any potential exploits.

Assessing the impact of potential threats

Have internal audit conduct another audit to see what has changed.

Contract with an external audit company to conduct an unbiased audit

Review the recommendations and follow up to see if audit implemented the changes

Meet with audit team to determine a timeline for corrections

Use within an organization to formulate security requirements and objectives

Implementation of business-enabling information security

Use within an organization to ensure compliance with laws and regulations

To enable organizations that adopt it to obtain certifications

Single Loss Expectancy (SLE)

Exposure Factor (EF)

Annualized Rate of Occurrence (ARO)

Temporal Probability (TP)