EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 471:

  If you are to determine the attack surface of an organization, which of the following is the BEST thing to do?

  A. Running a network scan to detect network services in the corporate DMZ
  B. Reviewing the need for a security clearance for each employee
  C. Using configuration management to determine when and where to apply security patches
  D. Training employees on the security policy regarding social engineering
  A. Running a network scan to detect network services in the corporate DMZ

• Question 472:

  Which of the following defines the role of a root Certificate Authority (CA) in a Public Key Infrastructure (PKI)?

  A. The root CA is the recovery agent used to encrypt data when a user's certificate is lost.
  B. The root CA stores the user's hash value for safekeeping.
  C. The CA is the trusted root that issues certificates.
  D. The root CA is used to encrypt email messages to prevent unintended disclosure of data.
  C. The CA is the trusted root that issues certificates.

• Question 473:

  What does a firewall check to prevent particular ports and applications from getting packets into an organization?

  A. Transport layer port numbers and application layer headers
  B. Presentation layer headers and the session layer port numbers
  C. Network layer headers and the session layer port numbers
  D. Application layer port numbers and the transport layer headers
  A. Transport layer port numbers and application layer headers

• Question 474:

  Emil uses nmap to scan two hosts using this command. nmap -sS -T4 -O 192.168.99.1 192.168.99.7 He receives this output: What is his conclusion?

  

  A. Host 192.168.99.7 is an iPad.
  B. He performed a SYN scan and OS scan on hosts 192.168.99.1 and 192.168.99.7.
  C. Host 192.168.99.1 is the host that he launched the scan from.
  D. Host 192.168.99.7 is down.
  B. He performed a SYN scan and OS scan on hosts 192.168.99.1 and 192.168.99.7.

• Question 475:

  In order to prevent particular ports and applications from getting packets into an organization, what does a firewall check?

  A. Network layer headers and the session layer port numbers
  B. Presentation layer headers and the session layer port numbers
  C. Application layer port numbers and the transport layer headers
  D. Transport layer port numbers and application layer headers
  D. Transport layer port numbers and application layer headers

• Question 476:

  A circuit level gateway works at which of the following layers of the OSI Model?

  A. Layer 5 - Application
  B. Layer 4 - TCP
  C. Layer 3 - Internet protocol
  D. Layer 2 - Data link
  B. Layer 4 - TCP

• Question 477:

  Nedved is an IT Security Manager of a bank in his country. One day. he found out that there is a security breach to his company's email server based on analysis of a suspicious connection from the email server to an unknown IP Address. What is the first thing that Nedved needs to do before contacting the incident response team?

  A. Leave it as it Is and contact the incident response te3m right away
  B. Block the connection to the suspicious IP Address from the firewall
  C. Disconnect the email server from the network
  D. Migrate the connection to the backup email server
  C. Disconnect the email server from the network

• Question 478:

  Sandra has been actively scanning the client network on which she is doing a vulnerability assessment test.

  While conducting a port scan she notices open ports in the range of 135 to 139. What protocol is most likely to be listening on those ports?

  A. Finger
  B. FTP
  C. Samba
  D. SMB
  D. SMB

• Question 479:

  From the following table, identify the wrong answer in terms of Range (ft).

  

  A. 802.11b
  B. 802.11g
  C. 802.16(WiMax)
  D. 802.11a
  D. 802.11a

• Question 480:

  Which of the following is a common Service Oriented Architecture (SOA) vulnerability?

  A. Cross-site scripting
  B. SQL injection
  C. VPath injection
  D. XML denial of service issues
  D. XML denial of service issues