EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 651:

  Ricardo wants to send secret messages to a competitor company. To secure these messages, he uses a technique of hiding a secret message within an ordinary message. The technique provides 'security through obscurity'. What technique is Ricardo using?

  A. Steganography
  B. Public-key cryptography
  C. RSA algorithm
  D. Encryption
  A. Steganography

• Question 652:

  For messages sent through an insecure channel, a properly implemented digital signature gives the receiver reason to believe the message was sent by the claimed sender. While using a digital signature, the message digest is encrypted with which key?

  A. Sender's public key
  B. Receiver's private key
  C. Receiver's public key
  D. Sender's private key
  D. Sender's private key

• Question 653:

  A security analyst in an insurance company is assigned to test a new web application that will be used by clients to help them choose and apply for an insurance plan. The analyst discovers that the application is developed in ASP scripting language and it uses MSSQL as a database backend. The analyst locates the application's search form and introduces the following code in the search input field:

  

  When the analyst submits the form, the browser returns a pop-up window that says "Vulnerable". Which web applications vulnerability did the analyst discover?

  A. Cross-site request forgery
  B. Command injection
  C. Cross-site scripting
  D. SQL injection
  C. Cross-site scripting

• Question 654:

  Which component of IPsec performs protocol-level functions that are required to encrypt and decrypt the packets?

  A. Internet Key Exchange (IKE)
  B. Oakley
  C. IPsec Policy Agent
  D. IPsec driver
  A. Internet Key Exchange (IKE)

• Question 655:

  The tools which receive event logs from servers, network equipment, and applications, and perform analysis and correlation on those logs, and can generate alarms for security relevant issues, are known as what?

  A. network Sniffer
  B. Vulnerability Scanner
  C. Intrusion prevention Server
  D. Security incident and event Monitoring
  D. Security incident and event Monitoring

• Question 656:

  XOR is a common cryptographic tool. 10110001 XOR 00111010 is?

  A. 10111100
  B. 11011000
  C. 10011101
  D. 10001011
  D. 10001011

• Question 657:

  You have successfully comprised a server having an IP address of 10.10.0.5. You would like to enumerate all machines in the same network quickly. What is the best nmap command you will use?

  A. nmap -T4 -F 10.10.0.0/24
  B. nmap -T4 -r 10.10.1.0/24
  C. nmap -T4 -O 10.10.0.0/24
  D. nmap -T4 -q 10.10.0.0/24
  A. nmap -T4 -F 10.10.0.0/24

• Question 658:

  How is the public key distributed in an orderly, controlled fashion so that the users can be sure of the sender's identity?

  A. Hash value
  B. Private key
  C. Digital signature
  D. Digital certificate
  D. Digital certificate

• Question 659:

  Which of the following can take an arbitrary length of input and produce a message digest output of 160 bit?

  A. SHA-1
  B. MD5
  C. HAVAL
  D. MD4
  A. SHA-1

• Question 660:

  Darius is analysing IDS logs. During the investigation, he noticed that there was nothing suspicious found and an alert was triggered on normal web application traffic. He can mark this alert as:

  A. False-Negative
  B. False-Positive
  C. True-Positive
  D. False-Signature
  A. False-Negative