EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 241:

  Name two software tools used for OS guessing? (Choose two.)

  A. Nmap
  B. Snadboy
  C. Queso
  D. UserInfo
  E. NetBus
  A. Nmap
  C. Queso

• Question 242:

  What network security concept requires multiple layers of security controls to be placed throughout an IT infrastructure, which improves the security posture of an organization to defend against malicious attacks or potential vulnerabilities?

  A. Security through obscurity
  B. Host-Based Intrusion Detection System
  C. Defense in depth
  D. Network-Based Intrusion Detection System
  C. Defense in depth

• Question 243:

  If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which other option could the tester use to get a response from a host using TCP?

  A. Hping
  B. Traceroute
  C. TCP ping
  D. Broadcast ping
  A. Hping

• Question 244:

  Which of the following parameters describe LM Hash (see exhibit): Exhibit:

  

  A. I, II, and III
  B. I
  C. II
  D. I and II
  A. I, II, and III

• Question 245:

  Which of the following will perform an Xmas scan using NMAP?

  A. nmap -sA 192.168.1.254
  B. nmap -sP 192.168.1.254
  C. nmap -sX 192.168.1.254
  D. nmap -sV 192.168.1.254
  C. nmap -sX 192.168.1.254

• Question 246:

  Which of the following represents the initial two commands that an IRC client sends to join an IRC network?

  A. USER, NICK
  B. LOGIN, NICK
  C. USER, PASS
  D. LOGIN, USER
  A. USER, NICK

• Question 247:

  Hackers often raise the trust level of a phishing message by modeling the email to look similar to the internal email used by the target company. This includes using logos, formatting, and names of the target company. The phishing message will often use the name of the company CEO, President, or Managers. The time a hacker spends performing research to locate this information about a company is known as?

  A. Exploration
  B. Investigation
  C. Reconnaissance
  D. Enumeration
  C. Reconnaissance

• Question 248:

  env x=`(){ :;};echo exploit` bash -c 'cat /etc/passwd' What is the Shellshock bash vulnerability attempting to do on a vulnerable Linux host?

  A. Display passwd content to prompt
  B. Removes the passwd file
  C. Changes all passwords in passwd
  D. Add new user to the passwd file
  A. Display passwd content to prompt

• Question 249:

  How can a policy help improve an employee's security awareness?

  A. By implementing written security procedures, enabling employee security training, and promoting the benefits of security
  B. By using informal networks of communication, establishing secret passing procedures, and immediately terminating employees
  C. By sharing security secrets with employees, enabling employees to share secrets, and establishing a consultative help line
  D. By decreasing an employee's vacation time, addressing ad-hoc employment clauses, and ensuring that managers know employee strengths
  A. By implementing written security procedures, enabling employee security training, and promoting the benefits of security

• Question 250:

  In the software security development life cycle process, threat modeling occurs in which phase?

  A. Design
  B. Requirements
  C. Verification
  D. Implementation
  A. Design