EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 531:

  Craig received a report of all the computers on the network that showed all the missing patches and weak passwords. What type of software generated this report?

  A. a port scanner
  B. a vulnerability scanner
  C. a virus scanner
  D. a malware scanner
  B. a vulnerability scanner

• Question 532:

  Which method can provide a better return on IT security investment and provide a thorough and comprehensive assessment of organizational security covering policy, procedure design, and implementation?

  A. Penetration testing
  B. Social engineering
  C. Vulnerability scanning
  D. Access control list reviews
  A. Penetration testing

• Question 533:

  Elliot is in the process of exploiting a web application that uses SQL as a back-end database. He's determined that the application is vulnerable to SQL injection, and has introduced conditional timing delays into injected queries to determine whether they are successful. What type of SQL injection is Elliot most likely performing?

  A. Error-based SQL injection
  B. Blind SQL injection
  C. Union-based SQL injection
  D. NoSQL injection
  B. Blind SQL injection

• Question 534:

  Some clients of TPNQM SA were redirected to a malicious site when they tried to access the TPNQM main site. Bob, a system administrator at TPNQM SA, found that they were victims of DNS Cache Poisoning. What should Bob recommend to deal with such a threat?

  A. The use of security agents in clients' computers
  B. The use of DNSSEC
  C. The use of double-factor authentication
  D. Client awareness
  B. The use of DNSSEC

• Question 535:

  What tool can crack Windows SMB passwords simply by listening to network traffic?

  A. This is not possible
  B. Netbus
  C. NTFSDOS
  D. L0phtcrack
  D. L0phtcrack

• Question 536:

  Matthew received an email with an attachment named "YouWon$10Grand.zip." The zip file contains a file named "HowToClaimYourPrize.docx.exe." Out of excitement and curiosity, Matthew opened the said file. Without his knowledge, the file copies itself to Matthew's APPDATA\IocaI directory and begins to beacon to a Command-and-control server to download additional malicious binaries. What type of malware has Matthew encountered?

  A. Key-logger
  B. Trojan
  C. Worm
  D. Macro Virus
  B. Trojan

• Question 537:

  How is sniffing broadly categorized?

  A. Active and passive
  B. Broadcast and unicast
  C. Unmanaged and managed
  D. Filtered and unfiltered
  A. Active and passive

• Question 538:

  Which of the following tools performs comprehensive tests against web servers, including dangerous files and CGIs?

  A. Nikto
  B. Snort
  C. John the Ripper
  D. Dsniff
  A. Nikto

• Question 539:

  Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results?

  

  A. The firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host.
  B. The lack of response from ports 21 and 22 indicate that those services are not running on the destination server.
  C. The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall.
  D. The scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error.
  C. The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall.

• Question 540:

  First thing you do every office day is to check your email inbox. One morning, you received an email from your best friend and the subject line is quite strange. What should you do?

  A. Delete the email and pretend nothing happened.
  B. Forward the message to your supervisor and ask for her opinion on how to handle the situation.
  C. Forward the message to your company's security response team and permanently delete the messagefrom your computer.
  D. Reply to the sender and ask them for more information about the message contents.
  C. Forward the message to your company's security response team and permanently delete the messagefrom your computer.