EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 221:

  Your company performs penetration tests and security assessments for small and medium- sized business in the local area. During a routine security assessment, you discover information that suggests your client is involved with human trafficking.

  What should you do?

  A. Immediately stop work and contact the proper legal authorities.
  B. Copy the data to removable media and keep it in case you need it.
  C. Confront the client in a respectful manner and ask her about the data.
  D. Ignore the data and continue the assessment until completed as agreed.
  A. Immediately stop work and contact the proper legal authorities.

• Question 222:

  While performing ping scans into a target network you get a frantic call from the organization's security team. They report that they are under a denial of service attack. When you stop your scan, the smurf attack event stops showing up on the organization's IDS monitor.

  How can you modify your scan to prevent triggering this event in the IDS?

  A. Scan more slowly.
  B. Do not scan the broadcast IP.
  C. Spoof the source IP address.
  D. Only scan the Windows systems.
  B. Do not scan the broadcast IP.

• Question 223:

  Why would you consider sending an email to an address that you know does not exist within the company you are performing a Penetration Test for?

  A. To determine who is the holder of the root account
  B. To perform a DoS
  C. To create needless SPAM
  D. To illicit a response back that will reveal information about email servers and how they treat undeliverable mail
  E. To test for virus protection
  D. To illicit a response back that will reveal information about email servers and how they treat undeliverable mail

• Question 224:

  You are the Network Admin, and you get a compliant that some of the websites are no longer accessible. You try to ping the servers and find them to be reachable. Then you type the IP address and then you try on the browser, and find it to be accessible. But they are not accessible when you try using the URL.

  What may be the problem?

  A. Traffic is Blocked on UDP Port 53
  B. Traffic is Blocked on UDP Port 80
  C. Traffic is Blocked on UDP Port 54
  D. Traffic is Blocked on UDP Port 80
  A. Traffic is Blocked on UDP Port 53

• Question 225:

  A botnet can be managed through which of the following?

  A. IRC
  B. E-Mail
  C. Linkedin and Facebook
  D. A vulnerable FTP server
  A. IRC

• Question 226:

  Firewalls are the software or hardware systems that are able to control and monitor the traffic coming in and out the target network based on pre-defined set of rules. Which of the following types of firewalls can protect against SQL injection attacks?

  A. Data-driven firewall
  B. Stateful firewall
  C. Packet firewall
  D. Web application firewall
  D. Web application firewall

• Question 227:

  An attacker runs netcat tool to transfer a secret file between two hosts.

  

  He is worried about information being sniffed on the network.

  How would the attacker use netcat to encrypt the information before transmitting onto the wire?

  A. Machine A: netcat -l -p -s password 1234 < testfileMachine B: netcat
  B. Machine A: netcat -l -e magickey -p 1234 < testfileMachine B: netcat
  C. Machine A: netcat -l -p 1234 < testfile -pw passwordMachine B: netcat 1234 -pw password
  D. Use cryptcat instead of netcat
  D. Use cryptcat instead of netcat

• Question 228:

  A hacker named Jack is trying to compromise a bank's computer system. He needs to know the operating system of that computer to launch further attacks. What process would help him?

  A. Banner Grabbing
  B. IDLE/IPID Scanning
  C. SSDP Scanning
  D. UDP Scanning
  A. Banner Grabbing

• Question 229:

  A technician is resolving an issue where a computer is unable to connect to the Internet using a wireless access point. The computer is able to transfer files locally to other machines, but cannot successfully reach the Internet. When the technician examines the IP address and default gateway they are both on the 192.168.1.0/24. Which of the following has occurred?

  A. The gateway is not routing to a public IP address.
  B. The computer is using an invalid IP address.
  C. The gateway and the computer are not on the same network.
  D. The computer is not using a private IP address.
  A. The gateway is not routing to a public IP address.

• Question 230:

  When utilizing technical assessment methods to assess the security posture of a network, which of the following techniques would be most effective in determining whether end-user security training would be beneficial?

  A. Vulnerability scanning
  B. Social engineering
  C. Application security testing
  D. Network sniffing
  B. Social engineering