EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 131:

  Supposed you are the Chief Network Engineer of a certain Telco. Your company is planning for a big business expansion and it requires that your network authenticate users connecting using analog modems, Digital Subscriber Lines (DSL), wireless data services, and Virtual Private Networks (VPN) over a Frame Relay network. Which AAA protocol would you implement?

  A. TACACS+
  B. DIAMETER
  C. Kerberos
  D. RADIUS
  D. RADIUS

• Question 132:

  International Organization for Standardization (ISO) standard 27002 provides guidance for compliance by outlining

  A. guidelines and practices for security controls.
  B. financial soundness and business viability metrics.
  C. standard best practice for configuration management.
  D. contract agreement writing standards.
  A. guidelines and practices for security controls.

• Question 133:

  During a penetration test, a tester finds that the web application being analyzed is vulnerable to Cross Site Scripting (XSS). Which of the following conditions must be met to exploit this vulnerability?

  A. The web application does not have the secure flag set.
  B. The session cookies do not have the HttpOnly flag set.
  C. The victim user should not have an endpoint security solution.
  D. The victim's browser must have ActiveX technology enabled.
  B. The session cookies do not have the HttpOnly flag set.

• Question 134:

  Which of the following business challenges could be solved by using a vulnerability scanner?

  A. Auditors want to discover if all systems are following a standard naming convention.
  B. A web server was compromised and management needs to know if any further systems were compromised.
  C. There is an emergency need to remove administrator access from multiple machines for an employee that quit.
  D. There is a monthly requirement to test corporate compliance with host application usage and security policies.
  D. There is a monthly requirement to test corporate compliance with host application usage and security policies.

• Question 135:

  You are the Systems Administrator for a large corporate organization. You need to monitor all network traffic on your local network for suspicious activities and receive notifications when an attack is occurring. Which tool would allow you to accomplish this goal?

  A. Network-based IDS
  B. Firewall
  C. Proxy
  D. Host-based IDS
  A. Network-based IDS

• Question 136:

  A server has been infected by a certain type of Trojan. The hacker intended to utilize it to send and host junk mails. What type of Trojan did the hacker use?

  A. Turtle Trojans
  B. Ransomware Trojans
  C. Botnet Trojan
  D. Banking Trojans
  C. Botnet Trojan

• Question 137:

  A security engineer is attempting to map a company's internal network. The engineer enters in the following NMAP command:

  NMAP –n –sS –P0 –p 80 ***.***.**.**

  What type of scan is this?

  A. Quick scan
  B. Intense scan
  C. Stealth scan
  D. Comprehensive scan
  C. Stealth scan

• Question 138:

  Which of the following is one of the most effective ways to prevent Cross-site Scripting (XSS) flaws in software applications?

  A. Validate and escape all information sent to a server
  B. Use security policies and procedures to define and implement proper security settings
  C. Verify access right before allowing access to protected information and UI controls
  D. Use digital certificates to authenticate a server prior to sending data
  A. Validate and escape all information sent to a server

• Question 139:

  A new wireless client is configured to join a 802.11 network. This client uses the same hardware and software as many of the other clients on the network. The client can see the network, but cannot connect. A wireless packet sniffer shows that the Wireless Access Point (WAP) is not responding to the association requests being sent by the wireless client.

  What is a possible source of this problem?

  A. The WAP does not recognize the client's MAC address
  B. The client cannot see the SSID of the wireless network
  C. Client is configured for the wrong channel
  D. The wireless client is not configured to use DHCP
  A. The WAP does not recognize the client's MAC address

• Question 140:

  Which of the following commands runs snort in packet logger mode?

  A. ./snort -dev -h ./log
  B. ./snort -dev -l ./log
  C. ./snort -dev -o ./log
  D. ./snort -dev -p ./log
  B. ./snort -dev -l ./log