EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 531:

  Smart cards use which protocol to transfer the certificate in a secure manner?

  A. Extensible Authentication Protocol (EAP)

  B. Point to Point Protocol (PPP)

  C. Point to Point Tunneling Protocol (PPTP)

  D. Layer 2 Tunneling Protocol (L2TP)

  Correct Answer: A

• Question 532:

  What is the most secure way to mitigate the theft of corporate information from a laptop that was left in a hotel room?

  A. Set a BIOS password.

  B. Encrypt the data on the hard drive.

  C. Use a strong logon password to the operating system.

  D. Back up everything on the laptop and store the backup in a safe place.

  Correct Answer: B

• Question 533:

  A large company intends to use Blackberry for corporate mobile phones and a security analyst is assigned to evaluate the possible threats. The analyst will use the Blackjacking attack method to demonstrate how an attacker could circumvent perimeter defenses and gain access to the corporate network. What tool should the analyst use to perform a Blackjacking attack?

  A. Paros Proxy

  B. BBProxy

  C. BBCrack

  D. Blooover

  Correct Answer: B

  Blackberry users warned of hacking tool threat. Users have been warned that the security of Blackberry wireless e-mail devices is at risk due to the availability this week of a new hacking tool. Secure Computing Corporation said businesses that have installed Blackberry servers behind their gateway security devices could be vulnerable to a hacking attack from a tool call BBProxy.

  References: http://www.computerweekly.com/news/2240062112/Technology-news-in-brief

• Question 534:

  Which statement is TRUE regarding network firewalls preventing Web Application attacks?

  A. Network firewalls can prevent attacks because they can detect malicious HTTP traffic.

  B. Network firewalls cannot prevent attacks because ports 80 and 443 must be opened.

  C. Network firewalls can prevent attacks if they are properly configured.

  D. Network firewalls cannot prevent attacks because they are too complex to configure.

  Correct Answer: B

  Network layer firewalls, also called packet filters, operate at a relatively low level of the TCP/IP protocol stack, not allowing packets to pass through the firewall unless they match the established rule set. To prevent Web Application attacks an Application layer firewall would be required.

  References: https://en.wikipedia.org/wiki/Firewall_(computing)#Network_layer_or_packet_filters

• Question 535:

  When using Wireshark to acquire packet capture on a network, which device would enable the capture of all traffic on the wire?

  A. Network tap

  B. Layer 3 switch

  C. Network bridge

  D. Application firewall

  Correct Answer: A

• Question 536:

  Which solution can be used to emulate computer services, such as mail and ftp, and to capture information related to logins or actions?

  A. Firewall

  B. Honeypot

  C. Core server

  D. Layer 4 switch

  Correct Answer: B

• Question 537:

  Which of the following examples best represents a logical or technical control?

  A. Security tokens

  B. Heating and air conditioning

  C. Smoke and fire alarms

  D. Corporate security policy

  Correct Answer: A

• Question 538:

  Which type of scan measures a person's external features through a digital video camera?

  A. Iris scan

  B. Retinal scan

  C. Facial recognition scan

  D. Signature kinetics scan

  Correct Answer: C

• Question 539:

  An attacker has been successfully modifying the purchase price of items purchased on the company's web site. The security administrators verify the web server and Oracle database have not been compromised directly. They have also verified the Intrusion Detection System (IDS) logs and found no attacks that could have caused this. What is the mostly likely way the attacker has been able to modify the purchase price?

  A. By using SQL injection

  B. By changing hidden form values

  C. By using cross site scripting

  D. By utilizing a buffer overflow attack

  Correct Answer: B

• Question 540:

  When creating a security program, which approach would be used if senior management is supporting and enforcing the security policy?

  A. A bottom-up approach

  B. A top-down approach

  C. A senior creation approach

  D. An IT assurance approach

  Correct Answer: B