EC-COUNCIL 312-50V10 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V10 Online Questions & Answers

• Question 81:

  Which of the following is the BEST way to protect Personally Identifiable Information (PII) from being exploited due to vulnerabilities of varying web applications?

  A. Use cryptographic storage to store all PII
  B. Use full disk encryption on all hard drives to protect PII
  C. Use encrypted communications protocols to transmit PII
  D. Use a security token to log into all Web applications that use PII
  C. Use encrypted communications protocols to transmit PII

• Question 82:

  Which of the following network attacks takes advantage of weaknesses in the fragment reassembly functionality of the TCP/IP protocol stack?

  A. Teardrop
  B. SYN flood
  C. Smurf attack
  D. Ping of death
  A. Teardrop

• Question 83:

  When conducting a penetration test, it is crucial to use all means to get all available information about the target network. One of the ways to do that is by sniffing the network. Which of the following cannot be performed by the passive network sniffing?

  A. Identifying operating systems, services, protocols and devices
  B. Modifying and replaying captured network traffic
  C. Collecting unencrypted information about usernames and passwords
  D. Capturing a network traffic for further analysis
  B. Modifying and replaying captured network traffic

• Question 84:

  Which of the following tools is used to analyze the files produced by several packet-capture programs such as tcpdump, WinDump, Wireshark, and EtherPeek?

  A. tcptrace
  B. tcptraceroute
  C. Nessus
  D. OpenVAS
  A. tcptrace

• Question 85:

  Neil notices that a single address is generating traffic from its port 500 to port 500 of several other machines on the network. This scan is eating up most of the network bandwidth and Neil is concerned. As a security professional, what would you infer from this scan?

  A. It is a network fault and the originating machine is in a network loop
  B. It is a worm that is malfunctioning or hardcoded to scan on port 500
  C. The attacker is trying to detect machines on the network which have SSL enabled
  D. The attacker is trying to determine the type of VPN implementation and checking for IPSec
  D. The attacker is trying to determine the type of VPN implementation and checking for IPSec

• Question 86:

  You need to deploy a new web-based software package for your organization. The package requires three separate servers and needs to be available on the Internet. What is the recommended architecture in terms of server placement?

  A. All three servers need to be placed internally
  B. A web server facing the Internet, an application server on the internal network, a database server on the internal network
  C. A web server and the database server facing the Internet, an application server on the internal network
  D. All three servers need to face the Internet so that they can communicate between themselves
  B. A web server facing the Internet, an application server on the internal network, a database server on the internal network

• Question 87:

  Which command can be used to show the current TCP/IP connections?

  A. Netsh
  B. Netstat
  C. Net use connection
  D. Net use
  A. Netsh

• Question 88:

  Which of the following parameters enables NMAP's operating system detection feature?

  A. NMAP -sV
  B. NMAP -oS
  C. NMAP -sR
  D. NMAP -O
  D. NMAP -O

• Question 89:

  If an e-commerce site was put into a live environment and the programmers failed to remove the secret entry point that was used during the application development, what is this secret entry point known as?

  A. SDLC process
  B. Honey pot
  C. SQL injection
  D. Trap door
  D. Trap door

• Question 90:

  Peter extracts the SIDs list from Windows 2000 Server machine using the hacking tool "SIDExtractor". Here is the output of the SIDs:

  

  From the above list identify the user account with System Administrator privileges.

  A. John
  B. Rebecca
  C. Sheela
  D. Shawn
  E. Somia
  F. Chang
  G. Micah
  F. Chang