EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 191:

  Nathan is testing some of his network devices. Nathan is using Macof to try and flood the ARP cache of these switches.

  If these switches' ARP cache is successfully flooded, what will be the result?

  A. The switches will drop into hub mode if the ARP cache is successfully flooded.
  B. If the ARP cache is flooded, the switches will drop into pix mode making it less susceptible to attacks.
  C. Depending on the switch manufacturer, the device will either delete every entry in its ARP cache or reroute packets to the nearest switch.
  D. The switches will route all traffic to the broadcast address created collisions.
  A. The switches will drop into hub mode if the ARP cache is successfully flooded.

• Question 192:

  A company has five different subnets: 192.168.1.0, 192.168.2.0, 192.168.3.0, 192.168.4.0 and 192.168.5.0. How can NMAP be used to scan these adjacent Class C networks?

  A. NMAP -P 192.168.1-5.
  B. NMAP -P 192.168.0.0/16
  C. NMAP -P 192.168.1.0,2.0,3.0,4.0,5.0
  D. NMAP -P 192.168.1/17
  A. NMAP -P 192.168.1-5.

• Question 193:

  The collection of potentially actionable, overt, and publicly available information is known as:

  A. Open-source intelligence
  B. Human intelligence
  C. Social intelligence
  D. Real intelligence
  A. Open-source intelligence

• Question 194:

  Which of the following Nmap commands will produce the following output? Output:

  

  A. nmap -sN -Ps -T4 192.168.1.1
  B. nmap -sT -sX -Pn -p 1-65535 192.168.1.1
  C. nmap -sS -Pn 192.168.1.1
  D. nmap -sS -sU -Pn -p 1-65535 192.168.1.1
  D. nmap -sS -sU -Pn -p 1-65535 192.168.1.1

• Question 195:

  An attacker has installed a RAT on a host. The attacker wants to ensure that when a user attempts to go to "www.MyPersonalBank.com", that the user is directed to a phishing site. Which file does the attacker need to modify?

  A. Hosts
  B. Sudoers
  C. Boot.ini
  D. Networks
  A. Hosts

• Question 196:

  Which among the following is a Windows command that a hacker can use to list all the shares to which the current user context has access?

  A. NET FILE
  B. NET USE
  C. NET CONFIG
  D. NET VIEW
  B. NET USE

• Question 197:

  What kind of risk will remain even if all theoretically possible safety measures would be applied?

  A. Residual risk
  B. Inherent risk
  C. Impact risk
  D. Deferred risk
  A. Residual risk

• Question 198:

  What is the best defense against privilege escalation vulnerability?

  A. Patch systems regularly and upgrade interactive login privileges at the system administrator level.
  B. Run administrator and applications on least privileges and use a content registry for tracking.
  C. Run services with least privileged accounts and implement multi-factor authentication and authorization.
  D. Review user roles and administrator privileges for maximum utilization of automation services.
  C. Run services with least privileged accounts and implement multi-factor authentication and authorization.

• Question 199:

  Which of the following descriptions is true about a static NAT?

  A. A static NAT uses a many-to-many mapping.
  B. A static NAT uses a one-to-many mapping.
  C. A static NAT uses a many-to-one mapping.
  D. A static NAT uses a one-to-one mapping.
  D. A static NAT uses a one-to-one mapping.

• Question 200:

  Which property ensures that a hash function will not produce the same hashed value for two different messages?

  A. Collision resistance
  B. Bit length
  C. Key strength
  D. Entropy
  A. Collision resistance