EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 351:

  The "white box testing" methodology enforces what kind of restriction?

  A. The internal operation of a system is completely known to the tester.
  B. Only the external operation of a system is accessible to the tester.
  C. Only the internal operation of a system is known to the tester.
  D. The internal operation of a system is only partly accessible to the tester.
  A. The internal operation of a system is completely known to the tester.

• Question 352:

  Which of the following open source tools would be the best choice to scan a network for potential targets?

  A. NMAP
  B. NIKTO
  C. CAIN
  D. John the Ripper
  A. NMAP

• Question 353:

  Which of the following are well known password-cracking programs?

  A. L0phtcrack
  B. NetCat
  C. Jack the Ripper
  D. Netbus
  E. John the Ripper
  A. L0phtcrack
  E. John the Ripper

• Question 354:

  Smart cards use which protocol to transfer the certificate in a secure manner?

  A. Extensible Authentication Protocol (EAP)
  B. Point to Point Protocol (PPP)
  C. Point to Point Tunneling Protocol (PPTP)
  D. Layer 2 Tunneling Protocol (L2TP)
  A. Extensible Authentication Protocol (EAP)

• Question 355:

  Which of the following is considered the best way to protect Personally Identifiable Information (PII) from Web application vulnerabilities?

  A. Use cryptographic storage to store all PII
  B. Use encrypted communications protocols to transmit PII
  C. Use full disk encryption on all hard drives to protect PII
  D. Use a security token to log into all Web applications that use PII
  A. Use cryptographic storage to store all PII

• Question 356:

  You are manually conducting Idle Scanning using Hping2. During your scanning you notice that almost every query increments the IPID regardless of the port being queried. One or two of the queries cause the IPID to increment by more than one value. Why do you think this occurs?

  A. The zombie you are using is not truly idle.
  B. A stateful inspection firewall is resetting your queries.
  C. Hping2 cannot be used for idle scanning.
  D. These ports are actually open on the target system.
  A. The zombie you are using is not truly idle.

• Question 357:

  Which of the following settings enables Nessus to detect when it is sending too many packets and the network pipe is approaching capacity?

  A. Netstat WMI Scan
  B. Silent Dependencies
  C. Consider unscanned ports as closed
  D. Reduce parallel connections on congestion
  D. Reduce parallel connections on congestion

• Question 358:

  Internet Protocol Security IPSec is actually a suite of protocols. Each protocol within the suite provides different functionality. Collective IPSec does everything except.

  A. Protect the payload and the headers
  B. Authenticate
  C. Encrypt
  D. Work at the Data Link Layer
  D. Work at the Data Link Layer

• Question 359:

  Which NMAP feature can a tester implement or adjust while scanning for open ports to avoid detection by the network's IDS?

  A. Timing options to slow the speed that the port scan is conducted
  B. Fingerprinting to identify which operating systems are running on the network
  C. ICMP ping sweep to determine which hosts on the network are not available
  D. Traceroute to control the path of the packets sent during the scan
  A. Timing options to slow the speed that the port scan is conducted

• Question 360:

  You work for Acme Corporation as Sales Manager. The company has tight network security restrictions. You are trying to steal data from the company's Sales database (Sales.xls) and transfer them to your home computer. Your company filters and monitors traffic that leaves from the internal network to the Internet. How will you achieve this without raising suspicion?

  A. Encrypt the Sales.xls using PGP and e-mail it to your personal gmail account
  B. Package the Sales.xls using Trojan wrappers and telnet them back your home computer
  C. You can conceal the Sales.xls database in another file like photo.jpg or other files and send it out in an innocent looking email or file transfer using Steganography techniques
  D. Change the extension of Sales.xls to sales.txt and upload them as attachment to your hotmail account
  C. You can conceal the Sales.xls database in another file like photo.jpg or other files and send it out in an innocent looking email or file transfer using Steganography techniques