EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 211:

  Security and privacy of/on information systems are two entities that requires lawful regulations. Which of the following regulations defines security and privacy controls for Federal information systems and organizations?

  A. NIST SP 800-53
  B. PCI-DSS
  C. EU Safe Harbor
  D. HIPAA
  A. NIST SP 800-53

• Question 212:

  Which of the statements concerning proxy firewalls is correct?

  A. Proxy firewalls increase the speed and functionality of a network.
  B. Firewall proxy servers decentralize all activity for an application.
  C. Proxy firewalls block network packets from passing to and from a protected network.
  D. Computers establish a connection with a proxy firewall which initiates a new network connection for the client.
  D. Computers establish a connection with a proxy firewall which initiates a new network connection for the client.

• Question 213:

  Password cracking programs reverse the hashing process to recover passwords. (True/False.)

  A. True
  B. False
  B. False

• Question 214:

  Diffie-Hellman (DH) groups determine the strength of the key used in the key exchange process. Which of the following is the correct bit size of the Diffie-Hellman (DH) group 5?

  A. 768 bit key
  B. 1025 bit key
  C. 1536 bit key
  D. 2048 bit key
  C. 1536 bit key

• Question 215:

  A security consultant decides to use multiple layers of anti-virus defense, such as end user desktop anti-virus and E-mail gateway. This approach can be used to mitigate which kind of attack?

  A. Forensic attack
  B. ARP spoofing attack
  C. Social engineering attack
  D. Scanning attack
  C. Social engineering attack

• Question 216:

  Which service in a PKI will vouch for the identity of an individual or company?

  A. KDC
  B. CA
  C. CR
  D. CBC
  B. CA

• Question 217:

  Which set of access control solutions implements two-factor authentication?

  A. USB token and PIN
  B. Fingerprint scanner and retina scanner
  C. Password and PIN
  D. Account and password
  A. USB token and PIN

• Question 218:

  Look at the following output. What did the hacker accomplish?

  

  A. The hacker used whois to gather publicly available records for the domain.
  B. The hacker used the "fierce" tool to brute force the list of available domains.
  C. The hacker listed DNS records on his own domain.
  D. The hacker successfully transferred the zone and enumerated the hosts.
  D. The hacker successfully transferred the zone and enumerated the hosts.

• Question 219:

  A security administrator notices that the log file of the company's webserver contains suspicious entries:

  

  Based on source code analysis, the analyst concludes that the login.php script is vulnerable to

  A. command injection.
  B. SQL injection.
  C. directory traversal.
  D. LDAP injection.
  B. SQL injection.

• Question 220:

  Which of the following is not a Bluetooth attack?

  A. Bluedriving
  B. Bluejacking
  C. Bluesmacking
  D. Bluesnarfing
  A. Bluedriving