EC-COUNCIL EC-COUNCIL Certifications 312-50V10 Questions & Answers

• Question 701:

  Code injection is a form of attack in which a malicious user:

  A. Inserts text into a data field that gets interpreted as code

  B. Gets the server to execute arbitrary code using a buffer overflow

  C. Inserts additional code into the JavaScript running in the browser

  D. Gains access to the codebase on the server and inserts new code

  Correct Answer: A

• Question 702:

  On performing a risk assessment, you need to determine the potential impacts when some of the critical business process of the company interrupt its service. What is the name of the process by which you can determine those critical business?

  A. Risk Mitigation

  B. Emergency Plan Response (EPR)

  C. Disaster Recovery Planning (DRP)

  D. Business Impact Analysis (BIA)

  Correct Answer: D

• Question 703:

  Which of the following provides a security professional with most information about the system's security posture?

  A. Wardriving, warchalking, social engineering

  B. Social engineering, company site browsing, tailgating

  C. Phishing, spamming, sending trojans

  D. Port scanning, banner grabbing, service identification

  Correct Answer: D

• Question 704:

  Based on the below log, which of the following sentences are true?

  Mar 1, 2016, 7:33:28 AM 10.240.250.23 ?54373 10.249.253.15 ?22 tcp_ip

  A. SSH communications are encrypted it's impossible to know who is the client or the server

  B. Application is FTP and 10.240.250.23 is the client and 10.249.253.15 is the server

  C. Application is SSH and 10.240.250.23 is the client and 10.249.253.15 is the server

  D. Application is SSH and 10.240.250.23 is the server and 10.249.253.15 is the server

  Correct Answer: C

• Question 705:

  Which of the following cryptography attack is an understatement for the extraction of cryptographic secrets

  (e.g.

  the password to an encrypted file) from a person by a coercion or torture?

  A.

  Chosen-Cipher text Attack

  B.

  Ciphertext-only Attack

  C.

  Timing Attack

  D.

  Rubber Hose Attack

  Correct Answer: D

• Question 706:

  You are attempting to run an Nmap port scan on a web server. Which of the following commands would result in a scan of common ports with the least amount of noise in order to evade IDS?

  A. nmap –A - Pn

  B. nmap –sP –p-65535-T5

  C. nmap –sT –O –T0

  D. nmap –A --host-timeout 99-T1

  Correct Answer: C

• Question 707:

  Bob finished a C programming course and created a small C application to monitor the network traffic and produce alerts when any origin sends "many" IP packets, based on the average number of packets sent by all origins and using some thresholds.

  In concept, the solution developed by Bob is actually:

  A. Just a network monitoring tool

  B. A signature-based IDS

  C. A hybrid IDS

  D. A behavior-based IDS

  Correct Answer: A

• Question 708:

  When conducting a penetration test, it is crucial to use all means to get all available information about the target network. One of the ways to do that is by sniffing the network. Which of the following cannot be performed by the passive network sniffing?

  A. Identifying operating systems, services, protocols and devices

  B. Modifying and replaying captured network traffic

  C. Collecting unencrypted information about usernames and passwords

  D. Capturing a network traffic for further analysis

  Correct Answer: B

• Question 709:

  What would you enter, if you wanted to perform a stealth scan using Nmap?

  A. nmap -sU

  B. nmap -sS

  C. nmap -sM

  D. nmap -sT

  Correct Answer: B

• Question 710:

  In Wireshark, the packet bytes panes show the data of the current packet in which format?

  A. Decimal

  B. ASCII only

  C. Binary

  D. Hexadecimal

  Correct Answer: D