EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 381:

  Bob, a network administrator at BigUniversity, realized that some students are connecting their notebooks in the wired network to have Internet access. In the university campus, there are many Ethernet ports available for professors and

  authorized visitors but not for students.

  He identified this when the IDS alerted for malware activities in the network.

  What should Bob do to avoid this problem?

  A. Disable unused ports in the switches
  B. Separate students in a different VLAN
  C. Use the 802.1x protocol
  D. Ask students to use the wireless network
  C. Use the 802.1x protocol

• Question 382:

  Which of the following cryptography attack methods is usually performed without the use of a computer?

  A. Ciphertext-only attack
  B. Chosen key attack
  C. Rubber hose attack
  D. Rainbow table attack
  C. Rubber hose attack

• Question 383:

  When setting up a wireless network, an administrator enters a pre-shared key for security. Which of the following is true?

  A. The key entered is a symmetric key used to encrypt the wireless data.
  B. The key entered is a hash that is used to prove the integrity of the wireless data.
  C. The key entered is based on the Diffie-Hellman method.
  D. The key is an RSA key used to encrypt the wireless data.
  A. The key entered is a symmetric key used to encrypt the wireless data.

• Question 384:

  Which of the following describes the characteristics of a Boot Sector Virus?

  A. Moves the MBR to another location on the RAM and copies itself to the original location of the MBR
  B. Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR
  C. Modifies directory table entries so that directory entries point to the virus code instead of the actual program
  D. Overwrites the original MBR and only executes the new virus code
  B. Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR

• Question 385:

  As an Ethical Hacker you are capturing traffic from your customer network with Wireshark and you need to find and verify just SMTP traffic. What command in Wireshark will help you to find this kind of traffic?

  A. request smtp 25
  B. tcp.port eq 25
  C. smtp port
  D. tcp.contains port 25
  B. tcp.port eq 25

• Question 386:

  A penetration tester is hired to do a risk assessment of a company's DMZ. The rules of engagement states that the penetration test be done from an external IP address with no prior knowledge of the internal IT systems. What kind of test is being performed?

  A. white box
  B. grey box
  C. red box
  D. black box
  D. black box

• Question 387:

  During a security audit of IT processes, an IS auditor found that there were no documented security procedures. What should the IS auditor do?

  A. Identify and evaluate existing practices
  B. Create a procedures document
  C. Conduct compliance testing
  D. Terminate the audit
  A. Identify and evaluate existing practices

• Question 388:

  What is the correct process for the TCP three-way handshake connection establishment and connection termination?

  A. Connection Establishment: FIN, ACK-FIN, ACKConnection Termination: SYN, SYN- ACK, ACK
  B. Connection Establishment: SYN, SYN-ACK, ACKConnection Termination: ACK, ACK- SYN, SYN
  C. Connection Establishment: ACK, ACK-SYN, SYNConnection Termination: FIN, ACK- FIN, ACK
  D. Connection Establishment: SYN, SYN-ACK, ACKConnection Termination: FIN, ACK- FIN, ACK
  D. Connection Establishment: SYN, SYN-ACK, ACKConnection Termination: FIN, ACK- FIN, ACK

• Question 389:

  When you are collecting information to perform a data analysis, Google commands are very useful to find sensitive information and files. These files may contain information about passwords, system functions, or documentation. What command will help you to search files using Google as a search engine?

  A. site: target.com filetype:xls username password email
  B. inurl: target.com filename:xls username password email
  C. domain: target.com archive:xls username password email
  D. site: target.com file:xls username password email
  A. site: target.com filetype:xls username password email

• Question 390:

  A network administrator received an administrative alert at 3:00 a.m. from the intrusion detection system. The alert was generated because a large number of packets were coming into the network over ports 20 and 21. During analysis, there were no signs of attack on the FTP servers. How should the administrator classify this situation?

  A. True negatives
  B. False negatives
  C. True positives
  D. False positives
  D. False positives