Free ECSAV8 Exam Braindumps (page: 24)

Page 23 of 51

Rule of Engagement (ROE) is the formal permission to conduct a pen-test. It provides top-level guidance for conducting the penetration testing.
Various factors are considered while preparing the scope of ROE which clearly explain the limits associated with the security test.


Which of the following factors is NOT considered while preparing the scope of the Rules of Engagement (ROE)?

  1. A list of employees in the client organization
  2. A list of acceptable testing techniques
  3. Specific IP addresses/ranges to be tested
  4. Points of contact for the penetration testing team

Answer(s): A



Many security and compliance projects begin with a simple idea: assess the organization's risk, vulnerabilities, and breaches. Implementing an IT security risk assessment is critical to the overall security posture of any organization. An effective security risk assessment can prevent breaches and reduce the impact of realized breaches.

What is the formula to calculate risk?

  1. Risk = Budget x Time
  2. Risk = Goodwill x Reputation
  3. Risk = Loss x Exposure factor
  4. Risk = Threats x Attacks

Answer(s): C



Which one of the following is false about Wireshark? (Select all that apply)

  1. Wireshark offers some options to analyze the WEP-decrypted data
  2. It does not support decrypting the TKIP or CCMP packets
  3. In order for Wireshark to decrypt the contents of the WEP-encrypted packets, it must be given the appropriate WEP key for the network
  4. Packet Sniffer Mode

Answer(s): A



Which of the following is not a condition specified by Hamel and Prahalad (1990)?

  1. Core competency should be aimed at protecting company interests
  2. Core competency is hard for competitors to imitate
  3. Core competency provides customer benefits
  4. Core competency can be leveraged widely to many products and markets

Answer(s): A


Reference:

http://www.studymode.com/essays/Hamel-Prahalad-Core-Competency-1228370.html






Post your Comments and Discuss EC-Council ECSAV8 exam with other Community members:

ECSAV8 Discussions & Posts