EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 301:

  What is a NULL scan?

  A. A scan in which all flags are turned off
  B. A scan in which certain flags are off
  C. A scan in which all flags are on
  D. A scan in which the packet size is set to zero
  E. A scan with an illegal packet size
  A. A scan in which all flags are turned off

• Question 302:

  In the OSI model, where does PPTP encryption take place?

  A. Transport layer
  B. Application layer
  C. Data link layer
  D. Network layer
  C. Data link layer

• Question 303:

  Which of the following is a vulnerability in GNU's bash shell (discovered in September of 2014) that gives attackers access to run remote commands on a vulnerable system?

  A. Shellshock
  B. Rootshell
  C. Rootshock
  D. Shellbash
  A. Shellshock

• Question 304:

  Which type of access control is used on a router or firewall to limit network activity?

  A. Mandatory
  B. Discretionary
  C. Rule-based
  D. Role-based
  C. Rule-based

• Question 305:

  When discussing passwords, what is considered a brute force attack?

  A. You attempt every single possibility until you exhaust all possible combinations or discover the password
  B. You threaten to use the rubber hose on someone unless they reveal their password
  C. You load a dictionary of words into your cracking program
  D. You create hashes of a large number of words and compare it with the encrypted passwords
  E. You wait until the password expires
  A. You attempt every single possibility until you exhaust all possible combinations or discover the password

• Question 306:

  Which of the following programming languages is most susceptible to buffer overflow attacks, due to its lack of a built-in-bounds checking mechanism?

  

  Output: Segmentation fault

  A. C#
  B. Python
  C. Java
  D. C++
  D. C++

• Question 307:

  An enterprise recently moved to a new office and the new neighborhood is a little risky. The CEO wants to monitor the physical perimeter and the entrance doors 24 hours. What is the best option to do this job?

  A. Use fences in the entrance doors.
  B. Install a CCTV with cameras pointing to the entrance doors and the street.
  C. Use an IDS in the entrance doors and install some of them near the corners.
  D. Use lights in all the entrance doors and along the company's perimeter.
  B. Install a CCTV with cameras pointing to the entrance doors and the street.

• Question 308:

  Knowing the nature of backup tapes, which of the following is the MOST RECOMMENDED way of storing backup tapes?

  A. In a cool dry environment
  B. Inside the data center for faster retrieval in a fireproof safe
  C. In a climate controlled facility offsite
  D. On a different floor in the same building
  C. In a climate controlled facility offsite

• Question 309:

  Which of the following programs is usually targeted at Microsoft Office products?

  A. Polymorphic virus
  B. Multipart virus
  C. Macro virus
  D. Stealth virus
  C. Macro virus

• Question 310:

  Why is a penetration test considered to be more thorough than vulnerability scan?

  A. Vulnerability scans only do host discovery and port scanning by default.
  B. A penetration test actively exploits vulnerabilities in the targeted infrastructure, while a vulnerability scan does not typically involve active exploitation.
  C. It is not ?a penetration test is often performed by an automated tool, while a vulnerability scan requires active engagement.
  D. The tools used by penetration testers tend to have much more comprehensive vulnerability databases.
  B. A penetration test actively exploits vulnerabilities in the targeted infrastructure, while a vulnerability scan does not typically involve active exploitation.