EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 501:

  Under the "Post-attack Phase and Activities", it is the responsibility of the tester to restore the systems to a pre-test state.

  Which of the following activities should not be included in this phase? (see exhibit)

  Exhibit:

  

  A. III
  B. IV
  C. III and IV
  D. All should be included.
  A. III

• Question 502:

  Which of the following is a command line packet analyzer similar to GUI-based Wireshark?

  A. tcpdump
  B. nessus
  C. etherea
  D. Jack the ripper
  A. tcpdump

• Question 503:

  After trying multiple exploits, you've gained root access to a Centos 6 server. To ensure you maintain access, what would you do first?

  A. Create User Account
  B. Disable Key Services
  C. Disable IPTables
  D. Download and Install Netcat
  A. Create User Account

• Question 504:

  A newly discovered flaw in a software application would be considered which kind of security vulnerability?

  A. Input validation flaw
  B. HTTP header injection vulnerability
  C. 0-day vulnerability
  D. Time-to-check to time-to-use flaw
  C. 0-day vulnerability

• Question 505:

  A penetration test was done at a company. After the test, a report was written and given to the company's IT authorities. A section from the report is shown below: According to the section from the report, which of the following choice is true?

  A. MAC Spoof attacks cannot be performed.
  B. Possibility of SQL Injection attack is eliminated.
  C. A stateful firewall can be used between intranet (LAN) and DMZ.
  D. There is access control policy between VLANs.
  C. A stateful firewall can be used between intranet (LAN) and DMZ.

• Question 506:

  Fingerprinting VPN firewalls is possible with which of the following tools?

  A. Angry IP
  B. Nikto
  C. Ike-scan
  D. Arp-scan
  C. Ike-scan

• Question 507:

  Study the following log extract and identify the attack.

  

  A. Hexcode Attack
  B. Cross Site Scripting
  C. Multiple Domain Traversal Attack
  D. Unicode Directory Traversal Attack
  D. Unicode Directory Traversal Attack

• Question 508:

  An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?

  A. Classified
  B. Overt
  C. Encrypted
  D. Covert
  D. Covert

• Question 509:

  Which of the following is optimized for confidential communications, such as bidirectional voice and video?

  A. RC4
  B. RC5
  C. MD4
  D. MD5
  A. RC4

• Question 510:

  Which tool would be used to collect wireless packet data?

  A. NetStumbler
  B. John the Ripper
  C. Nessus
  D. Netcat
  A. NetStumbler