EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 591:

  What is the purpose of DNS AAAA record?

  A. Authorization, Authentication and Auditing record
  B. Address prefix record
  C. Address database record
  D. IPv6 address resolution record
  D. IPv6 address resolution record

• Question 592:

  Which of the following is an extremely common IDS evasion technique in the web world?

  A. unicode characters
  B. spyware
  C. port knocking
  D. subnetting
  A. unicode characters

• Question 593:

  A hacker was able to easily gain access to a website. He was able to log in via the frontend user login form of the website using default or commonly used credentials. This exploitation is an example of what Software design flaw?

  A. Insufficient security management
  B. Insufficient database hardening
  C. Insufficient input validation
  D. Insufficient exception handling
  B. Insufficient database hardening

• Question 594:

  If a token and 4-digit personal identification number (PIN) are used to access a computer system and the token performs off-line checking for the correct PIN, what type of attack is possible?

  A. Birthday
  B. Brute force
  C. Man-in-the-middle
  D. Smurf
  B. Brute force

• Question 595:

  Which access control mechanism allows for multiple systems to use a central authentication server (CAS) that permits users to authenticate once and gain access to multiple systems?

  A. Role Based Access Control (RBAC)
  B. Discretionary Access Control (DAC)
  C. Windows authentication
  D. Single sign-on
  D. Single sign-on

• Question 596:

  Which of the following provides a security professional with most information about the system's security posture?

  A. Wardriving, warchalking, social engineering
  B. Social engineering, company site browsing, tailgating
  C. Phishing, spamming, sending trojans
  D. Port scanning, banner grabbing, service identification
  D. Port scanning, banner grabbing, service identification

• Question 597:

  Destination unreachable administratively prohibited messages can inform the hacker to what?

  A. That a circuit level proxy has been installed and is filtering traffic
  B. That his/her scans are being blocked by a honeypot or jail
  C. That the packets are being malformed by the scanning software
  D. That a router or other packet-filtering device is blocking traffic
  E. That the network is functioning normally
  D. That a router or other packet-filtering device is blocking traffic

• Question 598:

  You have successfully gained access to a linux server and would like to ensure that the succeeding outgoing traffic from this server will not be caught by a Network Based Intrusion Detection Systems (NIDS). What is the best way to evade the NIDS?

  A. Encryption
  B. Protocol Isolation
  C. Alternate Data Streams
  D. Out of band signalling
  A. Encryption

• Question 599:

  Which Nmap option would you use if you were not concerned about being detected and wanted to perform a very fast scan?

  A. –T0
  B. –T5
  C. -O
  D. -A
  B. –T5

• Question 600:

  ........is an attack type for a rogue Wi-Fi access point that appears to be a legitimate one offered on the premises, but actually has been set up to eavesdrop on wireless communications. It is the wireless version of the phishing scam. An attacker fools wireless users into connecting a laptop or mobile phone to a tainted hotspot by posing as a legitimate provider. This type of attack may be used to steal the passwords of unsuspecting users by either snooping the communication link or by phishing, which involves setting up a fraudulent web site and luring people there.

  Fill in the blank with appropriate choice.

  A. Collision Attack
  B. Evil Twin Attack
  C. Sinkhole Attack
  D. Signal Jamming Attack
  B. Evil Twin Attack