EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 251:

  Which of the following command line switch would you use for OS detection in Nmap?

  A. -D
  B. -O
  C. -P
  D. -X
  B. -O

• Question 252:

  When creating a security program, which approach would be used if senior management is supporting and enforcing the security policy?

  A. A bottom-up approach
  B. A top-down approach
  C. A senior creation approach
  D. An IT assurance approach
  B. A top-down approach

• Question 253:

  What type of OS fingerprinting technique sends specially crafted packets to the remote OS and analyzes the received response?

  A. Passive
  B. Reflective
  C. Active
  D. Distributive
  C. Active

• Question 254:

  How can rainbow tables be defeated?

  A. Password salting
  B. Use of non-dictionary words
  C. All uppercase character passwords
  D. Lockout accounts under brute force password cracking attempts
  A. Password salting

• Question 255:

  An unauthorized individual enters a building following an employee through the employee entrance after the lunch rush. What type of breach has the individual just performed?

  A. Reverse Social Engineering
  B. Tailgating
  C. Piggybacking
  D. Announced
  B. Tailgating

• Question 256:

  What is the proper response for a NULL scan if the port is open?

  A. SYN
  B. ACK
  C. FIN
  D. PSH
  E. RST
  F. No response
  F. No response

• Question 257:

  Bob, your senior colleague, has sent you a mail regarding a deal with one of the clients. You are requested to accept the offer and you oblige. After 2 days. Bob denies that he had ever sent a mail. What do you want to ""know"" to prove yourself that it was Bob who had send a mail?

  A. Authentication
  B. Confidentiality
  C. Integrity
  D. Non-Repudiation
  D. Non-Repudiation

• Question 258:

  During a blackbox pen test you attempt to pass IRC traffic over port 80/TCP from a compromised web enabled host. The traffic gets blocked; however, outbound HTTP traffic is unimpeded. What type of firewall is inspecting outbound traffic?

  A. Application
  B. Circuit
  C. Stateful
  D. Packet Filtering
  A. Application

• Question 259:

  A computer science student needs to fill some information into a secured Adobe PDF job application that was received from a prospective employer. Instead of requesting a new document that allowed the forms to be completed, the student decides to write a script that pulls passwords from a list of commonly used passwords to try against the secured PDF until the correct password is found or the list is exhausted.

  Which cryptography attack is the student attempting?

  A. Man-in-the-middle attack
  B. Brute-force attack
  C. Dictionary attack
  D. Session hijacking
  C. Dictionary attack

• Question 260:

  Windows file servers commonly hold sensitive files, databases, passwords and more. Which of the following choices would be a common vulnerability that usually exposes them?

  A. Cross-site scripting
  B. SQL injection
  C. Missing patches
  D. CRLF injection
  C. Missing patches