EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 451:

  Which initial procedure should an ethical hacker perform after being brought into an organization?

  A. Begin security testing.

  B. Turn over deliverables.

  C. Sign a formal contract with non-disclosure.

  D. Assess what the organization is trying to protect.

  Correct Answer: C

• Question 452:

  In the OSI model, where does PPTP encryption take place?

  A. Transport layer

  B. Application layer

  C. Data link layer

  D. Network layer

  Correct Answer: C

• Question 453:

  Which Open Web Application Security Project (OWASP) implements a web application full of known vulnerabilities?

  A. WebBugs

  B. WebGoat

  C. VULN_HTML

  D. WebScarab

  Correct Answer: B

• Question 454:

  Which of the following items is unique to the N-tier architecture method of designing software applications?

  A. Application layers can be separated, allowing each layer to be upgraded independently from other layers.

  B. It is compatible with various databases including Access, Oracle, and SQL.

  C. Data security is tied into each layer and must be updated for all layers when any upgrade is performed.

  D. Application layers can be written in C, ASP.NET, or Delphi without any performance loss.

  Correct Answer: A

• Question 455:

  While testing the company's web applications, a tester attempts to insert the following test script into the search area on the company's web site:

  Afterwards, when the tester presses the search button, a pop-up box appears on the screen with the text: "Testing Testing Testing". Which vulnerability has been detected in the web application?

  A. Buffer overflow

  B. Cross-site request forgery

  C. Distributed denial of service

  D. Cross-site scripting

  Correct Answer: D

• Question 456:

  The intrusion detection system at a software development company suddenly generates multiple alerts regarding attacks against the company's external webserver, VPN concentrator, and DNS servers. What should the security team do to determine which alerts to check first?

  A. Investigate based on the maintenance schedule of the affected systems.

  B. Investigate based on the service level agreements of the systems.

  C. Investigate based on the potential effect of the incident.

  D. Investigate based on the order that the alerts arrived in.

  Correct Answer: C

• Question 457:

  Which type of security document is written with specific step-by-step details?

  A. Process

  B. Procedure

  C. Policy

  D. Paradigm

  Correct Answer: B

• Question 458:

  A consultant has been hired by the V.P. of a large financial organization to assess the company's security posture. During the security testing, the consultant comes across child pornography on the V.P.'s computer. What is the consultant's obligation to the financial organization?

  A. Say nothing and continue with the security testing.

  B. Stop work immediately and contact the authorities.

  C. Delete the pornography, say nothing, and continue security testing.

  D. Bring the discovery to the financial organization's human resource department.

  Correct Answer: B

• Question 459:

  Which element of Public Key Infrastructure (PKI) verifies the applicant?

  A. Certificate authority

  B. Validation authority

  C. Registration authority

  D. Verification authority

  Correct Answer: C

• Question 460:

  Which of the following levels of algorithms does Public Key Infrastructure (PKI) use?

  A. RSA 1024 bit strength

  B. AES 1024 bit strength

  C. RSA 512 bit strength

  D. AES 512 bit strength

  Correct Answer: A