EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 601:

  Vlady works in a fishing company where the majority of the employees have very little understanding of IT let alone IT Security. Several information security issues that Vlady often found includes, employees sharing password, writing his/her password on a post it note and stick it to his/her desk, leaving the computer unlocked, didn't log out from emails or other social media accounts, and etc.

  After discussing with his boss, Vlady decided to make some changes to improve the security environment in his company. The first thing that Vlady wanted to do is to make the employees understand the importance of keeping confidential information, such as password, a secret and they should not share it with other persons.

  Which of the following steps should be the first thing that Vlady should do to make the employees in his company understand to importance of keeping confidential information a secret?

  A. Warning to those who write password on a post it note and put it on his/her desk
  B. Developing a strict information security policy
  C. Information security awareness training
  D. Conducting a one to one discussion with the other employees about the importance of information security
  A. Warning to those who write password on a post it note and put it on his/her desk

• Question 602:

  Which of the following antennas is commonly used in communications for a frequency band of 10 MHz to VHF and UHF?

  A. Omnidirectional antenna
  B. Dipole antenna
  C. Yagi antenna
  D. Parabolic grid antenna
  C. Yagi antenna

• Question 603:

  Which of the following conditions must be given to allow a tester to exploit a Cross-Site Request Forgery (CSRF) vulnerable web application?

  A. The victim user must open the malicious link with an Internet Explorer prior to version 8.
  B. The session cookies generated by the application do not have the HttpOnly flag set.
  C. The victim user must open the malicious link with a Firefox prior to version 3.
  D. The web application should not use random tokens.
  D. The web application should not use random tokens.

• Question 604:

  A certified ethical hacker (CEH) is approached by a friend who believes her husband is cheating. She offers to pay to break into her husband's email account in order to find proof so she can take him to court. What is the ethical response?

  A. Say no; the friend is not the owner of the account.
  B. Say yes; the friend needs help to gather evidence.
  C. Say yes; do the job for free.
  D. Say no; make sure that the friend knows the risk she's asking the CEH to take.
  A. Say no; the friend is not the owner of the account.

• Question 605:

  What is the term coined for logging, recording and resolving events in a company?

  A. Internal Procedure
  B. Security Policy
  C. Incident Management Process
  D. Metrics
  C. Incident Management Process

• Question 606:

  Which of the following tools can be used to perform a zone transfer?

  A. NSLookup
  B. Finger
  C. Dig
  D. Sam Spade
  E. Host
  F. Netcat
  G. Neotrace
  A. NSLookup
  C. Dig
  D. Sam Spade
  E. Host

• Question 607:

  ICMP ping and ping sweeps are used to check for active systems and to check:

  A. if ICMP ping traverses a firewall.
  B. the route that the ICMP ping took.
  C. the location of the switchport in relation to the ICMP ping.
  D. the number of hops an ICMP ping takes to reach a destination.
  A. if ICMP ping traverses a firewall.

• Question 608:

  Some passwords are stored using specialized encryption algorithms known as hashes. Why is this an appropriate method?

  A. It is impossible to crack hashed user passwords unless the key used to encrypt them is obtained.
  B. If a user forgets the password, it can be easily retrieved using the hash key stored by administrators.
  C. Hashing is faster compared to more traditional encryption algorithms.
  D. Passwords stored using hashes are non-reversible, making finding the password much more difficult.
  D. Passwords stored using hashes are non-reversible, making finding the password much more difficult.

• Question 609:

  Advanced encryption standard is an algorithm used for which of the following?

  A. Data integrity
  B. Key discovery
  C. Bulk data encryption
  D. Key recovery
  C. Bulk data encryption

• Question 610:

  Which of the following is an adaptive SQL Injection testing technique used to discover coding errors by inputting massive amounts of random data and observing the changes in the output?

  A. Function Testing
  B. Dynamic Testing
  C. Static Testing
  D. Fuzzing Testing
  D. Fuzzing Testing