EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 321:

  What is the role of test automation in security testing?

  A. It can accelerate benchmark tests and repeat them with a consistent test setup. But it cannot replace manual testing completely.
  B. It is an option but it tends to be very expensive.
  C. It should be used exclusively. Manual testing is outdated because of low speed and possible test setup inconsistencies.
  D. Test automation is not usable in security due to the complexity of the tests.
  A. It can accelerate benchmark tests and repeat them with a consistent test setup. But it cannot replace manual testing completely.

• Question 322:

  When analyzing the IDS logs, the system administrator noticed an alert was logged when the external router was accessed from the administrator's computer to update the router configuration. What type of an alert is this?

  A. False positive
  B. False negative
  C. True positve
  D. True negative
  A. False positive

• Question 323:

  Which of the following types of firewall inspects only header information in network traffic?

  A. Packet filter
  B. Stateful inspection
  C. Circuit-level gateway
  D. Application-level gateway
  A. Packet filter

• Question 324:

  One advantage of an application-level firewall is the ability to:

  A. filter packets at the network level.
  B. filter specific commands, such as http:post.
  C. retain state information for each packet.
  D. monitor tcp handshaking.
  B. filter specific commands, such as http:post.

• Question 325:

  Which of the following statements is FALSE with respect to Intrusion Detection Systems?

  A. Intrusion Detection Systems can be configured to distinguish specific content in network packets
  B. Intrusion Detection Systems can easily distinguish a malicious payload in an encrypted traffic
  C. Intrusion Detection Systems require constant update of the signature library
  D. Intrusion Detection Systems can examine the contents of the data n context of the network protocol
  B. Intrusion Detection Systems can easily distinguish a malicious payload in an encrypted traffic

• Question 326:

  Bob is doing a password assessment for one of his clients. Bob suspects that security policies are not in place. He also suspects that weak passwords are probably the norm throughout the company he is evaluating. Bob is familiar with password weaknesses and key loggers.

  Which of the following options best represents the means that Bob can adopt to retrieve passwords from his clients hosts and servers?

  A. Hardware, Software, and Sniffing.
  B. Hardware and Software Keyloggers.
  C. Passwords are always best obtained using Hardware key loggers.
  D. Software only, they are the most effective.
  A. Hardware, Software, and Sniffing.

• Question 327:

  You have retrieved the raw hash values from a Windows 2000 Domain Controller. Using social engineering, you come to know that they are enforcing strong passwords. You understand that all users are required to use passwords that are at least 8 characters in length. All passwords must also use 3 of the 4 following categories: lower case letters, capital letters, numbers and special characters. With your existing knowledge of users, likely user account names and the possibility that they will choose the easiest passwords possible, what would be the fastest type of password cracking attack you can run against these hash values and still get results?

  A. Online Attack
  B. Dictionary Attack
  C. Brute Force Attack
  D. Hybrid Attack
  D. Hybrid Attack

• Question 328:

  WPA2 uses AES for wireless data encryption at which of the following encryption levels?

  A. 64 bit and CCMP
  B. 128 bit and CRC
  C. 128 bit and CCMP
  D. 128 bit and TKIP
  C. 128 bit and CCMP

• Question 329:

  You are about to be hired by a well-known Bank to perform penetration tests. Which of the following documents describes the specifics of the testing, the associated violations, and essentially protects both the bank's interest and your liabilities as a tester?

  A. Service Level Agreement
  B. Non-Disclosure Agreement
  C. Terms of Engagement
  D. Project Scope
  C. Terms of Engagement

• Question 330:

  Under what conditions does a secondary name server request a zone transfer from a primary name server?

  A. When a primary SOA is higher that a secondary SOA
  B. When a secondary SOA is higher that a primary SOA
  C. When a primary name server has had its service restarted
  D. When a secondary name server has had its service restarted
  E. When the TTL falls to zero
  A. When a primary SOA is higher that a secondary SOA