Discuss EC-Council 712-50 Exam Topic 5 Question 115

The process to evaluate the technical and non-technical security controls of an IT system to validate that a given design and implementation meet a specific set of security requirements is called

ASecurity certification

BSecurity system analysis

CSecurity accreditation

DAlignment with business practices and goals.

Suggested Answer: A

Definition of Security Certification Security certification is the systematic process of evaluating technical and non-technical security controls to ensure that an IT system meets specified security requirements. This process is a key step in validating the security posture of a system before deployment.

Purpose and Scope

Technical Controls: Includes encryption, firewalls, access control mechanisms, etc.

Non-Technical Controls: Policies, procedures, and organizational standards.

Certification ensures that the implementation aligns with security frameworks and regulations.

Comparison of Options

B . Security system analysis: A broader term for examining IT systems, not specifically tied to security requirement validation.

C . Security accreditation: Focuses on management approval, which follows certification.

D . Alignment with business practices and goals: Pertains to strategic alignment, not security validation.

EC-Council Reference

Security certification aligns with phases of system development life cycles (SDLC) and is critical for ensuring compliance and risk management as per EC-Council CISO training.

Get Premium 712-50 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

27 comments · newest first

Rolf 6 months ago

D) Alignment with business practices seems off. Not really about security controls.

Beckie 6 months ago

I feel like B) Security system analysis could work, but it’s not the best choice.

Junita 6 months ago

I lean towards C) Security accreditation. It fits the definition well.

Marnie 6 months ago

I think it's A) Security certification. It sounds right.

Gail 6 months ago

I always mix up accreditation and certification, but A seems right.

Elena 6 months ago

Wait, is this really just about certification? Sounds too simple.

Johnathon 7 months ago

Totally agree with A!

Sheron 7 months ago

I thought it was C) Security accreditation!

Coleen 7 months ago

It's definitely A) Security certification.

Arlene 7 months ago

A) Security certification is definitely the way to go. Gotta make sure that system is locked down tight!

Raina 7 months ago

Haha, D) Alignment with business practices and goals? That's like saying the answer is "making the CEO happy." Not very technical if you ask me!

Shawnda 7 months ago

D) Alignment with business practices and goals? Really? That's not even close to the right answer. What kind of question is this?

Melinda 8 months ago

B) Security system analysis sounds like the right approach to me. Gotta analyze that system top to bottom!

Chanel 8 months ago

I think C) Security accreditation is the right answer. Isn't that when the system gets the official stamp of approval?

Junita 8 months ago

The correct answer is A) Security certification. This is the process of evaluating the security controls of an IT system.

Alaine 9 months ago

This sounds familiar! I believe it's A) Security certification, but I might be mixing it up with security assessments from another practice question.

Hui 9 months ago

I feel like this question is tricky. I recall something about aligning security with business goals, but I don't think that's the main focus here.

Herschel 9 months ago

I remember practicing a question about security accreditation, which I think is related to validating security controls. Could it be C?

Patria 9 months ago

I think the answer might be A) Security certification, but I'm not entirely sure if that's the right term for evaluating controls.

Eleonore 9 months ago

This looks straightforward. The process of evaluating security controls to validate the design and implementation is security certification, so I'm going with A.

Paulina 10 months ago

I'm a bit confused by the wording of this question. I'll need to re-read it a few times to make sure I understand what it's asking. Maybe I can eliminate some of the options first before deciding on the best answer.

Helga 10 months ago

Okay, I know this is about validating that security requirements are met. I'm pretty sure the correct answer is C - security accreditation. That's the process of formally approving the system to operate.

Tiffiny 10 months ago

Hmm, this seems to be testing my knowledge of security assessment terminology. I'll need to carefully review the definitions of each option to determine the best answer.

Claudia 10 months ago

I think this is asking about the process of evaluating security controls, so I'm leaning towards A or C. I'll need to think through the differences between certification and accreditation.

Jesusita 4 months ago

↳ replying to Claudia

Exactly! Accreditation is the final step after certification.

Lauryn 4 months ago

↳ replying to Claudia

Certification is more about proving security, while accreditation is about approval, right?

Tonette 4 months ago

↳ replying to Claudia

I'm also torn between A and C. What's the main difference?

EC-Council 712-50 Exam - Topic 5 Question 115 Discussion