EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 101:

  Sid is a judge for a programming contest. Before the code reaches him it goes through a restricted OS and is tested there. If it passes, then it moves onto Sid. What is this middle step called?

  A. Fuzzy-testing the code
  B. Third party running the code
  C. Sandboxing the code
  D. String validating the code
  A. Fuzzy-testing the code

• Question 102:

  What mechanism in Windows prevents a user from accidentally executing a potentially malicious batch (.bat) or PowerShell (.ps1) script?

  A. User Access Control (UAC)
  B. Data Execution Prevention (DEP)
  C. Address Space Layout Randomization (ASLR)
  D. Windows firewall
  B. Data Execution Prevention (DEP)

• Question 103:

  The "gray box testing" methodology enforces what kind of restriction?

  A. The internal operation of a system is only partly accessible to the tester.
  B. The internal operation of a system is completely known to the tester.
  C. Only the external operation of a system is accessible to the tester.
  D. Only the internal operation of a system is known to the tester.
  A. The internal operation of a system is only partly accessible to the tester.

• Question 104:

  What is the algorithm used by LM for Windows2000 SAM?

  A. MD4
  B. DES
  C. SHA
  D. SSL
  B. DES

• Question 105:

  What hacking attack is challenge/response authentication used to prevent?

  A. Replay attacks
  B. Scanning attacks
  C. Session hijacking attacks
  D. Password cracking attacks
  A. Replay attacks

• Question 106:

  A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?

  A. Issue the pivot exploit and set the meterpreter.
  B. Reconfigure the network settings in the meterpreter.
  C. Set the payload to propagate through the meterpreter.
  D. Create a route statement in the meterpreter.
  D. Create a route statement in the meterpreter.

• Question 107:

  You have successfully gained access to your client's internal network and successfully comprised a Linux server which is part of the internal IP network. You want to know which Microsoft Windows workstations have file sharing enabled. Which port would you see listening on these Windows machines in the network?

  A. 445
  B. 3389
  C. 161
  D. 1433
  A. 445

• Question 108:

  Windows LAN Manager (LM) hashes are known to be weak.

  Which of the following are known weaknesses of LM? (Choose three.)

  A. Converts passwords to uppercase.
  B. Hashes are sent in clear text over the network.
  C. Makes use of only 32-bit encryption.
  D. Effective length is 7 characters.
  A. Converts passwords to uppercase.
  B. Hashes are sent in clear text over the network.
  D. Effective length is 7 characters.

• Question 109:

  A person approaches a network administrator and wants advice on how to send encrypted email from home. The end user does not want to have to pay for any license fees or manage server services. Which of the following is the most secure encryption protocol that the network administrator should recommend?

  A. IP Security (IPSEC)
  B. Multipurpose Internet Mail Extensions (MIME)
  C. Pretty Good Privacy (PGP)
  D. Hyper Text Transfer Protocol with Secure Socket Layer (HTTPS)
  C. Pretty Good Privacy (PGP)

• Question 110:

  If there is an Intrusion Detection System (IDS) in intranet, which port scanning technique cannot be used?

  A. Spoof Scan
  B. TCP Connect scan
  C. TCP SYN
  D. Idle Scan
  C. TCP SYN