Discuss EC-Council 312-50 Exam Topic 3 Question 3

Which of the following steps for risk assessment methodology refers to vulnerability identification?

ADetermines if any flaws exist in systems, policies, or procedures

BAssigns values to risk probabilities; Impact values.

CDetermines risk probability that vulnerability will be exploited (High. Medium, Low)

DIdentifies sources of harm to an IT system. (Natural, Human. Environmental)

Suggested Answer: C

Get Premium 312-50 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Cathrine 12 months ago

I thought vulnerability identification was more specific than just flaws.

Veronika 12 months ago

Wait, are we sure A is the answer? Seems too broad.

Stevie 12 months ago

Totally agree, A is the right choice!

Carmen 1 year ago

I think D is more about identifying sources, not vulnerabilities.

Nobuko 1 year ago

A is definitely about finding flaws in systems.

Reena 1 year ago

I’m leaning towards A because it mentions flaws, but I also recall something about assigning values to risks, which could confuse me.

Tayna 1 year ago

I feel like C is related to assessing vulnerabilities, but it seems more focused on the probability of exploitation rather than identifying them.

Cheryl 1 year ago

I remember practicing a question similar to this, and I think it was about identifying sources of harm. So maybe D could be the right answer?

Lilli 1 year ago

I think vulnerability identification is about finding flaws in systems, so I might go with A. But I'm not completely sure.

Bethanie 1 year ago

I'm not entirely sure about this one. I'll need to review my notes on network security features and think through how each one could apply to the given scenario.

Anisha 1 year ago

Hmm, I'm a bit unsure about this one. I think I would suggest making sure the students understand how the ICT will be used, as that could help them engage with the activities more effectively.

Roselle 1 year ago

Hmm, this seems like a pretty straightforward question. I'm pretty confident that ZoneAlarm is a well-known firewall software, so I'll go with that.

Leota 1 year ago

I'm not entirely sure, but coercion feels too harsh. Maybe negotiation could help address their concerns? I remember a practice scenario where that worked well.

EC-Council 312-50 Exam - Topic 3 Question 3 Discussion