EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 451:

  In which phase of the ethical hacking process can Google hacking be employed? This is a technique that involves manipulating a search string with specific operators to search for vulnerabilities.

  Example:

  allintitle: root passwd

  A. Maintaining Access
  B. Gaining Access
  C. Reconnaissance
  D. Scanning and Enumeration
  C. Reconnaissance

• Question 452:

  What is correct about digital signatures?

  A. A digital signature cannot be moved from one signed document to another because it is the hash of the original document encrypted with the private key of the signing party.
  B. Digital signatures may be used in different documents of the same type.
  C. A digital signature cannot be moved from one signed document to another because it is a plain hash of the document content.
  D. Digital signatures are issued once for each user and can be used everywhere until they expire.
  A. A digital signature cannot be moved from one signed document to another because it is the hash of the original document encrypted with the private key of the signing party.

• Question 453:

  Which of the following program infects the system boot sector and the executable files at the same time?

  A. Stealth virus
  B. Polymorphic virus
  C. Macro virus
  D. Multipartite Virus
  D. Multipartite Virus

• Question 454:

  Risks = Threats x Vulnerabilities is referred to as the:

  A. Risk equation
  B. Threat assessment
  C. BIA equation
  D. Disaster recovery formula
  A. Risk equation

• Question 455:

  A hacker has managed to gain access to a Linux host and stolen the password file from /etc/passwd. How can he use it?

  A. The password file does not contain the passwords themselves.
  B. He can open it and read the user ids and corresponding passwords.
  C. The file reveals the passwords to the root user only.
  D. He cannot read it because it is encrypted.
  A. The password file does not contain the passwords themselves.

• Question 456:

  Which of the following is designed to verify and authenticate individuals taking part in a data exchange within an enterprise?

  A. SOA
  B. Single-Sign On
  C. PKI
  D. Biometrics
  C. PKI

• Question 457:

  An ethical hacker for a large security research firm performs penetration tests, vulnerability tests, and risk assessments. A friend recently started a company and asks the hacker to perform a penetration test and vulnerability assessment of the new company as a favor. What should the hacker's next step be before starting work on this job?

  A. Start by foot printing the network and mapping out a plan of attack.
  B. Ask the employer for authorization to perform the work outside the company.
  C. Begin the reconnaissance phase with passive information gathering and then move into active information gathering.
  D. Use social engineering techniques on the friend's employees to help identify areas that may be susceptible to attack.
  B. Ask the employer for authorization to perform the work outside the company.

• Question 458:

  A zone file consists of which of the following Resource Records (RRs)?

  A. DNS, NS, AXFR, and MX records
  B. DNS, NS, PTR, and MX records
  C. SOA, NS, AXFR, and MX records
  D. SOA, NS, A, and MX records
  D. SOA, NS, A, and MX records

• Question 459:

  A Network Administrator was recently promoted to Chief Security Officer at a local university. One of employee's new responsibilities is to manage the implementation of an RFID card access system to a new server room on campus. The server room will house student enrollment information that is securely backed up to an off-site location.

  During a meeting with an outside consultant, the Chief Security Officer explains that he is concerned that the existing security controls have not been designed properly. Currently, the Network Administrator is responsible for approving and issuing RFID card access to the server room, as well as reviewing the electronic access logs on a weekly basis.

  Which of the following is an issue with the situation?

  A. Segregation of duties
  B. Undue influence
  C. Lack of experience
  D. Inadequate disaster recovery plan
  A. Segregation of duties

• Question 460:

  Which of the following viruses tries to hide from anti-virus programs by actively altering and corrupting the chosen service call interruptions when they are being run?

  A. Cavity virus
  B. Polymorphic virus
  C. Tunneling virus
  D. Stealth virus
  D. Stealth virus