EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 121:

  When does the Payment Card Industry Data Security Standard (PCI-DSS) require organizations to perform external and internal penetration testing?

  A. At least once a year and after any significant upgrade or modification
  B. At least once every three years or after any significant upgrade or modification
  C. At least twice a year or after any significant upgrade or modification
  D. At least once every two years and after any significant upgrade or modification
  A. At least once a year and after any significant upgrade or modification

• Question 122:

  A developer for a company is tasked with creating a program that will allow customers to update their billing and shipping information. The billing address field used is limited to 50 characters. What pseudo code would the developer use to avoid a buffer overflow attack on the billing address field?

  A. if (billingAddress = 50) {update field} else exit
  B. if (billingAddress != 50) {update field} else exit
  C. if (billingAddress >= 50) {update field} else exit
  D. if (billingAddress
  D. if (billingAddress

• Question 123:

  A hacker is an intelligent individual with excellent computer skills and the ability to explore a computer's software and hardware without the owner's permission. Their intention can either be to simply gain knowledge or to illegally make changes. Which of the following class of hacker refers to an individual who works both offensively and defensively at various times?

  A. Suicide Hacker
  B. Black Hat
  C. White Hat
  D. Gray Hat
  D. Gray Hat

• Question 124:

  Which element of Public Key Infrastructure (PKI) verifies the applicant?

  A. Certificate authority
  B. Validation authority
  C. Registration authority
  D. Verification authority
  C. Registration authority

• Question 125:

  How does the Address Resolution Protocol (ARP) work?

  A. It sends a request packet to all the network elements, asking for the MAC address from a specific IP.
  B. It sends a reply packet to all the network elements, asking for the MAC address from a specific IP.
  C. It sends a reply packet for a specific IP, asking for the MAC address.
  D. It sends a request packet to all the network elements, asking for the domain name from a specific IP.
  A. It sends a request packet to all the network elements, asking for the MAC address from a specific IP.

• Question 126:

  Which of the following is the structure designed to verify and authenticate the identity of individuals within the enterprise taking part in a data exchange?

  A. PKI
  B. single sign on
  C. biometrics
  D. SOA
  A. PKI

• Question 127:

  Which protocol is used for setting up secure channels between two devices, typically in VPNs?

  A. PPP
  B. IPSEC
  C. PEM
  D. SET
  B. IPSEC

• Question 128:

  When using Wireshark to acquire packet capture on a network, which device would enable the capture of all traffic on the wire?

  A. Network tap
  B. Layer 3 switch
  C. Network bridge
  D. Application firewall
  A. Network tap

• Question 129:

  What is the main advantage that a network-based IDS/IPS system has over a host-based solution?

  A. They do not use host system resources.
  B. They are placed at the boundary, allowing them to inspect all traffic.
  C. They are easier to install and configure.
  D. They will not interfere with user interfaces.
  A. They do not use host system resources.

• Question 130:

  Which of the following is a symmetric cryptographic standard?

  A. DSA
  B. PKI
  C. RSA
  D. 3DES
  D. 3DES