EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 511:

  Jesse receives an email with an attachment labeled "Court_Notice_21206.zip". Inside the zip file is a file named "Court_Notice_21206.docx.exe" disguised as a word document. Upon execution, a window appears stating, "This word document is corrupt." In the background, the file copies itself to Jesse APPDATA\local directory and begins to beacon to a C2 server to download additional malicious binaries.

  What type of malware has Jesse encountered?

  A. Trojan
  B. Worm
  C. Macro Virus
  D. Key-Logger
  A. Trojan

• Question 512:

  The use of technologies like IPSec can help guarantee the following: authenticity, integrity, confidentiality and:

  A. non-repudiation.
  B. operability.
  C. security.
  D. usability.
  A. non-repudiation.

• Question 513:

  It is an entity or event with the potential to adversely impact a system through unauthorized access, destruction, disclosure, denial of service or modification of data. Which of the following terms best matches the definition?

  A. Threat
  B. Attack
  C. Vulnerability
  D. Risk
  A. Threat

• Question 514:

  You want to do an ICMP scan on a remote computer using hping2. What is the proper syntax?

  A. hping2 host.domain.com
  B. hping2 --set-ICMP host.domain.com
  C. hping2 -i host.domain.com
  D. hping2 -1 host.domain.com
  D. hping2 -1 host.domain.com

• Question 515:

  You're doing an internal security audit and you want to find out what ports are open on all the servers. What is the best way to find out?

  A. Scan servers with Nmap
  B. Physically go to each server
  C. Scan servers with MBSA
  D. Telent to every port on each server
  A. Scan servers with Nmap

• Question 516:

  The configuration allows a wired or wireless network interface controller to pass all traffic it receives to the central processing unit (CPU), rather than passing only the frames that the controller is intended to receive. Which of the following is being described?

  A. promiscuous mode
  B. port forwarding
  C. multi-cast mode
  D. WEM
  A. promiscuous mode

• Question 517:

  What is the benefit of performing an unannounced Penetration Testing?

  A. The tester will have an actual security posture visibility of the target network.
  B. Network security would be in a "best state" posture.
  C. It is best to catch critical infrastructure unpatched.
  D. The tester could not provide an honest analysis.
  A. The tester will have an actual security posture visibility of the target network.

• Question 518:

  After gaining access to the password hashes used to protect access to a web based application, knowledge of which cryptographic algorithms would be useful to gain access to the application?

  A. SHA1
  B. Diffie-Helman
  C. RSA
  D. AES
  A. SHA1

• Question 519:

  You are an Ethical Hacker who is auditing the ABC company. When you verify the NOC one of the machines has 2 connections, one wired and the other wireless. When you verify the configuration of this Windows system you find two static routes. route add 10.0.0.0 mask 255.0.0.0 10.0.0.1 route add 0.0.0.0 mask 255.0.0.0 199.168.0.1 What is the main purpose of those static routes?

  A. Both static routes indicate that the traffic is external with different gateway.
  B. The first static route indicates that the internal traffic will use an external gateway and the second static route indicates that the traffic will be rerouted.
  C. Both static routes indicate that the traffic is internal with different gateway.
  D. The first static route indicates that the internal addresses are using the internal gateway and the second static route indicates that all the traffic that is not internal must go to an external gateway.
  D. The first static route indicates that the internal addresses are using the internal gateway and the second static route indicates that all the traffic that is not internal must go to an external gateway.

• Question 520:

  An attacker attaches a rogue router in a network. He wants to redirect traffic to a LAN attached to his router as part of a man-in-the-middle attack. What measure on behalf of the legitimate admin can mitigate this attack?

  A. Only using OSPFv3 will mitigate this risk.
  B. Make sure that legitimate network routers are configured to run routing protocols with authentication.
  C. Redirection of the traffic cannot happen unless the admin allows it explicitly.
  D. Disable all routing protocols and only use static routes.
  B. Make sure that legitimate network routers are configured to run routing protocols with authentication.