EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 511:

  Bluetooth uses which digital modulation technique to exchange information between paired devices?

  A. PSK (phase-shift keying)

  B. FSK (frequency-shift keying)

  C. ASK (amplitude-shift keying)

  D. QAM (quadrature amplitude modulation)

  Correct Answer: A

  Phase shift keying is the form of Bluetooth modulation used to enable the higher data rates achievable with Bluetooth 2 EDR (Enhanced Data Rate). Two forms of PSK are used: /4 DQPSK, and 8DPSK.

  References: http://www.radio-electronics.com/info/wireless/bluetooth/radio-interface- modulation.php

• Question 512:

  What is the correct PCAP filter to capture all TCP traffic going to or from host 192.168.0.125 on port 25?

  A. tcp.src == 25 and ip.host == 192.168.0.125

  B. host 192.168.0.125:25

  C. port 25 and host 192.168.0.125

  D. tcp.port == 25 and ip.host == 192.168.0.125

  Correct Answer: D

• Question 513:

  Which of the following programs is usually targeted at Microsoft Office products?

  A. Polymorphic virus

  B. Multipart virus

  C. Macro virus

  D. Stealth virus

  Correct Answer: C

  A macro virus is a virus that is written in a macro language: a programming language which is embedded inside a software application (e.g., word processors and spreadsheet applications). Some applications, such as Microsoft Office, allow macro programs to be embedded in documents such that the macros are run automatically when the document is opened, and this provides a distinct mechanism by which malicious computer instructions can spread.

  References: https://en.wikipedia.org/wiki/Macro_virus

• Question 514:

  How can telnet be used to fingerprint a web server?

  A. telnet webserverAddress 80HEAD / HTTP/1.0

  B. telnet webserverAddress 80PUT / HTTP/1.0

  C. telnet webserverAddress 80HEAD / HTTP/2.0

  D. telnet webserverAddress 80PUT / HTTP/2.0

  Correct Answer: A

• Question 515:

  A consultant is hired to do physical penetration testing at a large financial company. In the first day of his assessment, the consultant goes to the company`s building dressed like an electrician and waits in the lobby for an employee to pass through the main access gate, then the consultant follows the employee behind to get into the restricted area. Which type of attack did the consultant perform?

  A. Man trap

  B. Tailgating

  C. Shoulder surfing

  D. Social engineering

  Correct Answer: B

• Question 516:

  Which of the following cryptography attack methods is usually performed without the use of a computer?

  A. Ciphertext-only attack

  B. Chosen key attack

  C. Rubber hose attack

  D. Rainbow table attack

  Correct Answer: C

• Question 517:

  Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results?

  

  A. The firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host.

  B. The lack of response from ports 21 and 22 indicate that those services are not running on the destination server.

  C. The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall.

  D. The scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error.

  Correct Answer: C

• Question 518:

  A company is using Windows Server 2003 for its Active Directory (AD). What is the most efficient way to crack the passwords for the AD users?

  A. Perform a dictionary attack.

  B. Perform a brute force attack.

  C. Perform an attack with a rainbow table.

  D. Perform a hybrid attack.

  Correct Answer: C

• Question 519:

  How is sniffing broadly categorized?

  A. Active and passive

  B. Broadcast and unicast

  C. Unmanaged and managed

  D. Filtered and unfiltered

  Correct Answer: A

• Question 520:

  An organization hires a tester to do a wireless penetration test. Previous reports indicate that the last test did not contain management or control packets in the submitted traces. Which of the following is the most likely reason for lack of management or control packets?

  A. The wireless card was not turned on.

  B. The wrong network card drivers were in use by Wireshark.

  C. On Linux and Mac OS X, only 802.11 headers are received in promiscuous mode.

  D. Certain operating systems and adapters do not collect the management or control packets.

  Correct Answer: D