EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 461:

  Which of the following tools can be used for passive OS fingerprinting?

  A. tcpdump
  B. nmap
  C. ping
  D. tracert
  A. tcpdump

• Question 462:

  An LDAP directory can be used to store information similar to a SQL database. LDAP uses a _____ database structure instead of SQL's _____ structure. Because of this, LDAP has difficulty representing many-to-one relationships.

  A. Relational, Hierarchical
  B. Strict, Abstract
  C. Hierarchical, Relational
  D. Simple, Complex
  C. Hierarchical, Relational

• Question 463:

  Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and that a certificate is still valid for specific operations?

  A. Certificate issuance
  B. Certificate validation
  C. Certificate cryptography
  D. Certificate revocation
  B. Certificate validation

• Question 464:

  A company has publicly hosted web applications and an internal Intranet protected by a firewall. Which technique will help protect against enumeration?

  A. Reject all invalid email received via SMTP.
  B. Allow full DNS zone transfers.
  C. Remove A records for internal hosts.
  D. Enable null session pipes.
  C. Remove A records for internal hosts.

• Question 465:

  A bank stores and processes sensitive privacy information related to home loans. However, auditing has never been enabled on the system. What is the first step that the bank should take before enabling the audit feature?

  A. Perform a vulnerability scan of the system.
  B. Determine the impact of enabling the audit feature.
  C. Perform a cost/benefit analysis of the audit feature.
  D. Allocate funds for staffing of audit log review.
  B. Determine the impact of enabling the audit feature.

• Question 466:

  Developers at your company are creating a web application which will be available for use by anyone on the Internet, The developers have taken the approach of implementing a Three-Tier Architecture for the web application. The developers are now asking you which network should the Presentation Tier (front- end web server) be placed in?

  A. isolated vlan network
  B. Mesh network
  C. DMZ network
  D. Internal network
  A. isolated vlan network

• Question 467:

  Which of the following types of firewalls ensures that the packets are part of the established session?

  A. Stateful inspection firewall
  B. Circuit-level firewall
  C. Application-level firewall D. Switch-level firewall
  A. Stateful inspection firewall

• Question 468:

  What is one of the advantages of using both symmetric and asymmetric cryptography in SSL/TLS?

  A. Symmetric algorithms such as AES provide a failsafe when asymmetric methods fail.
  B. Asymmetric cryptography is computationally expensive in comparison. However, it is well-suited to securely negotiate keys for use with symmetric cryptography.
  C. Symmetric encryption allows the server to securely transmit the session keys out-of- band.
  D. Supporting both types of algorithms allows less-powerful devices such as mobile phones to use symmetric encryption instead.
  D. Supporting both types of algorithms allows less-powerful devices such as mobile phones to use symmetric encryption instead.

• Question 469:

  When purchasing a biometric system, one of the considerations that should be reviewed is the processing speed. Which of the following best describes what it is meant by processing?

  A. The amount of time it takes to convert biometric data into a template on a smart card.
  B. The amount of time and resources that are necessary to maintain a biometric system.
  C. The amount of time it takes to be either accepted or rejected form when an individual provides Identification and authentication information.
  D. How long it takes to setup individual user accounts.
  C. The amount of time it takes to be either accepted or rejected form when an individual provides Identification and authentication information.

• Question 470:

  Which of the following is the primary objective of a rootkit?

  A. It opens a port to provide an unauthorized service
  B. It creates a buffer overflow
  C. It replaces legitimate programs
  D. It provides an undocumented opening in a program
  C. It replaces legitimate programs