EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 341:

  You are trying to break into a highly classified top-secret mainframe computer with highest security system in place at Merclyn Barley Bank located in Los Angeles.

  You know that conventional hacking doesn't work in this case, because organizations such as banks are generally tight and secure when it comes to protecting their systems.

  In other words, you are trying to penetrate an otherwise impenetrable system.

  How would you proceed?

  A. Look for "zero-day" exploits at various underground hacker websites in Russia and China and buy the necessary exploits from these hackers and target the bank's network
  B. Try to hang around the local pubs or restaurants near the bank, get talking to a poorly- paid or disgruntled employee, and offer them money if they'll abuse their access privileges by providing you with sensitive information
  C. Launch DDOS attacks against Merclyn Barley Bank's routers and firewall systems using 100, 000 or more "zombies" and "bots"
  D. Try to conduct Man-in-the-Middle (MiTM) attack and divert the network traffic going to the Merclyn Barley Bank's Webserver to that of your machine using DNS Cache Poisoning techniques
  B. Try to hang around the local pubs or restaurants near the bank, get talking to a poorly- paid or disgruntled employee, and offer them money if they'll abuse their access privileges by providing you with sensitive information

• Question 342:

  What would you enter, if you wanted to perform a stealth scan using Nmap?

  A. nmap -sU
  B. nmap -sS
  C. nmap -sM
  D. nmap -sT
  B. nmap -sS

• Question 343:

  The intrusion detection system at a software development company suddenly generates multiple alerts regarding attacks against the company's external webserver, VPN concentrator, and DNS servers. What should the security team do to determine which alerts to check first?

  A. Investigate based on the maintenance schedule of the affected systems.
  B. Investigate based on the service level agreements of the systems.
  C. Investigate based on the potential effect of the incident.
  D. Investigate based on the order that the alerts arrived in.
  C. Investigate based on the potential effect of the incident.

• Question 344:

  PGP, SSL, and IKE are all examples of which type of cryptography?

  A. Public Key
  B. Secret Key
  C. Hash Algorithm
  D. Digest
  A. Public Key

• Question 345:

  Which of the following security policies defines the use of VPN for gaining access to an internal corporate network?

  A. Network security policy
  B. Remote access policy
  C. Information protection policy
  D. Access control policy
  B. Remote access policy

• Question 346:

  In order to show improvement of security over time, what must be developed?

  A. Reports
  B. Testing tools
  C. Metrics
  D. Taxonomy of vulnerabilities
  C. Metrics

• Question 347:

  What results will the following command yield: 'NMAP -sS -O -p 123-153 192.168.100.3'?

  A. A stealth scan, opening port 123 and 153
  B. A stealth scan, checking open ports 123 to 153
  C. A stealth scan, checking all open ports excluding ports 123 to 153
  D. A stealth scan, determine operating system, and scanning ports 123 to 153
  D. A stealth scan, determine operating system, and scanning ports 123 to 153

• Question 348:

  What port number is used by LDAP protocol?

  A. 110
  B. 389
  C. 464
  D. 445
  B. 389

• Question 349:

  Which protocol is used for setting up secured channels between two devices, typically in VPNs?

  A. IPSEC
  B. PEM
  C. SET
  D. PPP
  A. IPSEC

• Question 350:

  Which of the following tools are used for enumeration? (Choose three.)

  A. SolarWinds
  B. USER2SID
  C. Cheops
  D. SID2USER
  E. DumpSec
  B. USER2SID
  D. SID2USER
  E. DumpSec