EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 431:

  Initiating an attack against targeted businesses and organizations, threat actors compromise a carefully selected website by inserting an exploit resulting in malware infection. The attackers run exploits on well-known and trusted sites likely to be visited by their targeted victims. Aside from carefully choosing sites to compromise, these attacks are known to incorporate zero-day exploits that target unpatched vulnerabilities. Thus, the targeted entities are left with little or no defense against these exploits.

  What type of attack is outlined in the scenario?

  A. Watering Hole Attack
  B. Heartbleed Attack
  C. Shellshock Attack
  D. Spear Phising Attack
  A. Watering Hole Attack

• Question 432:

  What does the -oX flag do in an Nmap scan?

  A. Perform an express scan
  B. Output the results in truncated format to the screen
  C. Perform an Xmas scan
  D. Output the results in XML format to a file
  D. Output the results in XML format to a file

• Question 433:

  A hacker searches in Google for filetype:pcf to find Cisco VPN config files. Those files may contain connectivity passwords that can be decoded with which of the following?

  A. Cupp
  B. Nessus
  C. Cain and Abel
  D. John The Ripper Pro
  C. Cain and Abel

• Question 434:

  A covert channel is a channel that:

  A. transfers information over, within a computer system, or network that is outside of the security policy.
  B. transfers information over, within a computer system, or network that is within the security policy.
  C. transfers information via a communication path within a computer system, or network for transfer of data.
  D. transfers information over, within a computer system, or network that is encrypted.
  A. transfers information over, within a computer system, or network that is outside of the security policy.

• Question 435:

  Eve stole a file named secret.txt, transferred it to her computer and she just entered these commands: What is she trying to achieve?

  

  A. She is encrypting the file.
  B. She is using John the Ripper to view the contents of the file.
  C. She is using ftp to transfer the file to another hacker named John.
  D. She is using John the Ripper to crack the passwords in the secret.txt file.
  D. She is using John the Ripper to crack the passwords in the secret.txt file.

• Question 436:

  An attacker with access to the inside network of a small company launches a successful STP manipulation attack. What will he do next?

  A. He will create a SPAN entry on the spoofed root bridge and redirect traffic to his computer.
  B. He will activate OSPF on the spoofed root bridge.
  C. He will repeat the same attack against all L2 switches of the network.
  D. He will repeat this action so that it escalates to a DoS attack.
  A. He will create a SPAN entry on the spoofed root bridge and redirect traffic to his computer.

• Question 437:

  

  What does the option * indicate?

  A. s
  B. t
  C. n
  D. a
  C. n

• Question 438:

  You perform a scan of your company's network and discover that TCP port 123 is open. What services by default run on TCP port 123?

  A. Telnet
  B. POP3
  C. Network Time Protocol
  D. DNS
  C. Network Time Protocol

• Question 439:

  Which of the following algorithms can be used to guarantee the integrity of messages being sent, in transit, or stored?

  A. symmetric algorithms
  B. asymmetric algorithms
  C. hashing algorithms
  D. integrity algorithms
  C. hashing algorithms

• Question 440:

  An Intrusion Detection System (IDS) has alerted the network administrator to a possibly malicious sequence of packets sent to a Web server in the network's external DMZ. The packet traffic was captured by the IDS and saved to a PCAP file. What type of network tool can be used to determine if these packets are genuinely malicious or simply a false positive?

  A. Protocol analyzer
  B. Intrusion Prevention System (IPS)
  C. Network sniffer
  D. Vulnerability scanner
  A. Protocol analyzer