EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 111:

  Which statement best describes a server type under an N-tier architecture?

  A. A group of servers at a specific layer
  B. A single server with a specific role
  C. A group of servers with a unique role
  D. A single server at a specific layer
  C. A group of servers with a unique role

• Question 112:

  The Open Web Application Security Project (OWASP) testing methodology addresses the need to secure web applications by providing which one of the following services?

  A. An extensible security framework named COBIT
  B. A list of flaws and how to fix them
  C. Web application patches
  D. A security certification for hardened web applications
  B. A list of flaws and how to fix them

• Question 113:

  While conducting a penetration test, the tester determines that there is a firewall between the tester's machine and the target machine. The firewall is only monitoring TCP handshaking of packets at the session layer of the OSI model. Which type of firewall is the tester trying to traverse?

  A. Packet filtering firewall
  B. Application-level firewall
  C. Circuit-level gateway firewall
  D. Stateful multilayer inspection firewall
  C. Circuit-level gateway firewall

• Question 114:

  Which address translation scheme would allow a single public IP address to always correspond to a single machine on an internal network, allowing "server publishing"?

  A. Overloading Port Address Translation
  B. Dynamic Port Address Translation
  C. Dynamic Network Address Translation
  D. Static Network Address Translation
  D. Static Network Address Translation

• Question 115:

  Tremp is an IT Security Manager, and he is planning to deploy an IDS in his small company. He is looking for an IDS with the following characteristics: - Verifies success or failure of an attack - Monitors system activities Detects attacks that a network-based IDS fails to detect - Near real-time detection and response - Does not require additional hardware - Lower entry cost Which type of IDS is best suited for Tremp's requirements?

  A. Gateway-based IDS
  B. Network-based IDS
  C. Host-based IDS
  D. Open source-based
  C. Host-based IDS

• Question 116:

  A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System (OS) version installed. Considering the NMAP result below, which of the following is likely to be installed on the target machine by the OS?

  

  A. The host is likely a printer.
  B. The host is likely a Windows machine.
  C. The host is likely a Linux machine.
  D. The host is likely a router.
  A. The host is likely a printer.

• Question 117:

  In the context of Windows Security, what is a 'null' user?

  A. A user that has no skills
  B. An account that has been suspended by the admin
  C. A pseudo account that has no username and password
  D. A pseudo account that was created for security administration purpose
  C. A pseudo account that has no username and password

• Question 118:

  You have the SOA presented below in your Zone.

  Your secondary servers have not been able to contact your primary server to synchronize information. How long will the secondary servers attempt to contact the primary server before it considers that zone is dead and stops responding to

  queries?

  collegae.edu.SOA, cikkye.edu ipad.college.edu. (200302028 3600 3600 604800 3600)

  A. One day
  B. One hour
  C. One week
  D. One month
  C. One week

• Question 119:

  Switches maintain a CAM Table that maps individual MAC addresses on the network to physical ports on the switch.

  

  In MAC flooding attack, a switch is fed with many Ethernet frames, each containing different source MAC addresses, by the attacker. Switches have a limited memory for mapping various MAC addresses to physical ports. What happens when the CAM table becomes full?

  A. Switch then acts as hub by broadcasting packets to all machines on the network
  B. The CAM overflow table will cause the switch to crash causing Denial of Service
  C. The switch replaces outgoing frame switch factory default MAC address of FF:FF:FF:FF:FF:FF
  D. Every packet is dropped and the switch sends out SNMP alerts to the IDS port
  A. Switch then acts as hub by broadcasting packets to all machines on the network

• Question 120:

  Which of the following is an example of IP spoofing?

  A. SQL injections
  B. Man-in-the-middle
  C. Cross-site scripting
  D. ARP poisoning
  B. Man-in-the-middle