EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 371:

  Which initial procedure should an ethical hacker perform after being brought into an organization?

  A. Begin security testing.
  B. Turn over deliverables.
  C. Sign a formal contract with non-disclosure.
  D. Assess what the organization is trying to protect.
  C. Sign a formal contract with non-disclosure.

• Question 372:

  Which of the following is an example of an asymmetric encryption implementation?

  A. SHA1
  B. PGP
  C. 3DES
  D. MD5
  B. PGP

• Question 373:

  Which of the following identifies the three modes in which Snort can be configured to run?

  A. Sniffer, Packet Logger, and Network Intrusion Detection System
  B. Sniffer, Network Intrusion Detection System, and Host Intrusion Detection System
  C. Sniffer, Host Intrusion Prevention System, and Network Intrusion Prevention System
  D. Sniffer, Packet Logger, and Host Intrusion Prevention System
  A. Sniffer, Packet Logger, and Network Intrusion Detection System

• Question 374:

  Which of the following ensures that updates to policies, procedures, and configurations are made in a controlled and documented fashion?

  A. Regulatory compliance
  B. Peer review
  C. Change management
  D. Penetration testing
  C. Change management

• Question 375:

  Seth is starting a penetration test from inside the network. He hasn't been given any information about the network. What type of test is he conducting?

  A. Internal Whitebox
  B. External, Whitebox
  C. Internal, Blackbox
  D. External, Blackbox
  C. Internal, Blackbox

• Question 376:

  E-mail scams and mail fraud are regulated by which of the following?

  A. 18 U.S.C. par. 1030 Fraud and Related activity in connection with Computers
  B. 18 U.S.C. par. 1029 Fraud and Related activity in connection with Access Devices
  C. 18 U.S.C. par. 1362 Communication Lines, Stations, or Systems
  D. 18 U.S.C. par. 2510 Wire and Electronic Communications Interception and Interception of Oral Communication
  A. 18 U.S.C. par. 1030 Fraud and Related activity in connection with Computers

• Question 377:

  Security Policy is a definition of what it means to be secure for a system, organization or other entity. For Information Technologies, there are sub-policies like Computer Security Policy, Information Protection Policy, Information Security Policy, network Security Policy, Physical Security Policy, Remote Access Policy, and User Account Policy.

  What is the main theme of the sub-policies for Information Technologies?

  A. Availability, Non-repudiation, Confidentiality
  B. Authenticity, Integrity, Non-repudiation
  C. Confidentiality, Integrity, Availability
  D. Authenticity, Confidentiality, Integrity
  C. Confidentiality, Integrity, Availability

• Question 378:

  During a recent security assessment, you discover the organization has one Domain Name Server (DNS) in a Demilitarized Zone (DMZ) and a second DNS server on the internal network. What is this type of DNS configuration commonly called?

  A. Split DNS
  B. DNSSEC
  C. DynDNS
  D. DNS Scheme
  A. Split DNS

• Question 379:

  Jack was attempting to fingerprint all machines in the network using the following Nmap syntax:

  invictus@victim_server:~$ nmap -T4 -0 10.10.0.0/24

  TCP/IP fingerprinting (for OS scan) xxxxxxx xxxxxx xxxxxxxxx. QUITTING!

  Obviously, it is not going through. What is the issue here?

  A. OS Scan requires root privileges
  B. The nmap syntax is wrong.
  C. The outgoing TCP/IP fingerprinting is blocked by the host firewall
  D. This is a common behavior for a corrupted nmap application
  A. OS Scan requires root privileges

• Question 380:

  A big company, who wanted to test their security infrastructure, wants to hire elite pen testers like you. During the interview, they asked you to show sample reports from previous penetration tests. What should you do?

  A. Share reports, after NDA is signed
  B. Share full reports, not redacted
  C. Decline but, provide references
  D. Share full reports with redactions
  C. Decline but, provide references