EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 71:

  Why containers are less secure that virtual machines?

  A. Host OS on containers has a larger surface attack.
  B. Containers may full fill disk space of the host.
  C. A compromise container may cause a CPU starvation of the host.
  D. Containers are attached to the same virtual network.
  C. A compromise container may cause a CPU starvation of the host.

• Question 72:

  Eric has discovered a fantastic package of tools named Dsniff on the Internet. He has learnt to use these tools in his lab and is now ready for real world exploitation. He was able to effectively intercept communications between the two entities and establish credentials with both sides of the connections. The two remote ends of the communication never notice that Eric is relaying the information between the two. What would you call this attack?

  A. Interceptor
  B. Man-in-the-middle
  C. ARP Proxy
  D. Poisoning Attack
  B. Man-in-the-middle

• Question 73:

  _________ is a set of extensions to DNS that provide to DNS clients (resolvers) origin authentication of DNS data to reduce the threat of DNS poisoning, spoofing, and similar attacks types.

  A. DNSSEC
  B. Zone transfer
  C. Resource transfer
  D. Resource records
  A. DNSSEC

• Question 74:

  Which results will be returned with the following Google search query? site:target.com -site:Marketing.target.com accounting

  A. Results matching all words in the query
  B. Results matching "accounting" in domain target.com but not on the site Marketing.target.com
  C. Results from matches on the site marketing.target.com that are in the domain target.com but do not include the word accounting D. Results for matches on target.com and Marketing.target.com that include the word "accounting"
  B. Results matching "accounting" in domain target.com but not on the site Marketing.target.com

• Question 75:

  John the Ripper is a technical assessment tool used to test the weakness of which of the following?

  A. Usernames
  B. File permissions
  C. Firewall rulesets
  D. Passwords
  D. Passwords

• Question 76:

  An attacker has captured a target file that is encrypted with public key cryptography. Which of the attacks below is likely to be used to crack the target file?

  A. Timing attack
  B. Replay attack
  C. Memory trade-off attack
  D. Chosen plain-text attack
  D. Chosen plain-text attack

• Question 77:

  A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System (OS) version installed. Considering the NMAP result below, which of the following is likely to be installed on the target machine by the OS?

  

  A. The host is likely a Windows machine.
  B. The host is likely a Linux machine.
  C. The host is likely a router.
  D. The host is likely a printer.
  D. The host is likely a printer.

• Question 78:

  Which statement is TRUE regarding network firewalls preventing Web Application attacks?

  A. Network firewalls can prevent attacks because they can detect malicious HTTP traffic.
  B. Network firewalls cannot prevent attacks because ports 80 and 443 must be opened.
  C. Network firewalls can prevent attacks if they are properly configured.
  D. Network firewalls cannot prevent attacks because they are too complex to configure.
  B. Network firewalls cannot prevent attacks because ports 80 and 443 must be opened.

• Question 79:

  Which Metasploit Framework tool can help penetration tester for evading Anti-virus Systems?

  A. msfpayload
  B. msfcli
  C. msfencode
  D. msfd
  C. msfencode

• Question 80:

  Your team has won a contract to infiltrate an organization. The company wants to have the attack be as realistic as possible; therefore, they did not provide any information besides the company name. What should be the first step in security testing the client?

  A. Reconnaissance
  B. Enumeration
  C. Scanning
  D. Escalation
  A. Reconnaissance