ECCouncil Updated 712-50 Exam Questions and Answers by mikayla

Phishing attacks, misconfigurations, and social engineering are among the most common methods used in successful cyber-attacks. Attackers exploit human vulnerabilities through phishing and social engineering while taking advantage of technical flaws like misconfigurations. Together, these vectors account for a significant portion of modern cyber breaches.

Statement of Objectives (SOA):

SOA is a high-level document used in procurement processes, such as requests for proposals (RFPs).

It specifies desired outcomes or objectives without dictating the exact method of achieving them, allowing vendors flexibility in their solutions.

Key Elements of an SOA:

Clear definition of deliverables.

Alignment with business needs and project goals.

Why Not Other Options:

A: Task definitions are detailed in a Statement of Work (SOW), not an SOA.

B & D: These do not align with the procurement and proposal context of an SOA.

References:

EC-Council CISO Material: Procurement and Contract Management Best Practices.

The statement of retained earnings indicates the portion of net income that an organization retains after paying dividends. These retained earnings can be reinvested into the business, potentially financing future initiatives such as security controls. It does not directly correlate with the CISO’s budget (A) or represent savings from security controls (B). Similarly, it does not sum capital expenditures (C), which are accounted for separately.

Understanding Cost Variance (CV) in Earned Value Management (EVM):

CV = Earned Value (EV) - Actual Cost (AC).

A CV of -1,200 indicates that the project has spent more than its earned value, meaning it is over budget.

Why Not Other Options:

B: Reserve budgets are unrelated to CV.

C: CV of zero would indicate alignment with the budget.

D: A negative CV explicitly means over budget, not under.