EC-COUNCIL 312-50V11 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V11 Online Questions & Answers

• Question 101:

  Internet Protocol Security IPsec is actually a suite pf protocols. Each protocol within the suite provides different functionality. Collective IPsec does everything except.

  A. Protect the payload and the headers
  B. Encrypt
  C. Work at the Data Link Layer
  D. Authenticate
  D. Authenticate

• Question 102:

  ViruXine.W32 virus hides their presence by changing the underlying executable code.

  This Virus code mutates while keeping the original algorithm intact, the code changes itself each time it runs, but the function of the code (its semantics) will not change at all.

  

  Here is a section of the Virus code:

  

  What is this technique called?

  A. Polymorphic Virus
  B. Metamorphic Virus
  C. Dravidic Virus
  D. Stealth Virus
  A. Polymorphic Virus

• Question 103:

  What is the purpose of a demilitarized zone on a network?

  A. To scan all traffic coming through the DMZ to the internal network
  B. To only provide direct access to the nodes within the DMZ and protect the network behind it
  C. To provide a place to put the honeypot
  D. To contain the network devices you wish to protect
  B. To only provide direct access to the nodes within the DMZ and protect the network behind it

• Question 104:

  John, a disgruntled ex-employee of an organization, contacted a professional hacker to exploit the organization. In the attack process, the professional hacker Installed a scanner on a machine belonging to one of the vktims and scanned several machines on the same network to Identify vulnerabilities to perform further exploitation. What is the type of vulnerability assessment tool employed by John in the above scenario?

  A. Proxy scanner
  B. Agent-based scanner
  C. Network-based scanner
  D. Cluster scanner
  B. Agent-based scanner

• Question 105:

  What is the role of test automation in security testing?

  A. It is an option but it tends to be very expensive.
  B. It should be used exclusively. Manual testing is outdated because of low speed and possible test setup inconsistencies.
  C. Test automation is not usable in security due to the complexity of the tests.
  D. It can accelerate benchmark tests and repeat them with a consistent test setup. But it cannot replace manual testing completely.
  D. It can accelerate benchmark tests and repeat them with a consistent test setup. But it cannot replace manual testing completely.

• Question 106:

  Which of the following program infects the system boot sector and the executable files at the same time?

  A. Polymorphic virus
  B. Stealth virus
  C. Multipartite Virus
  D. Macro virus
  C. Multipartite Virus

• Question 107:

  Kevin, an encryption specialist, implemented a technique that enhances the security of keys used for encryption and authentication. Using this technique, Kevin input an initial key to an algorithm that generated an enhanced key that is resistant to brute-force attacks. What is the technique employed by Kevin to improve the security of encryption keys?

  A. Key derivation function
  B. Key reinstallation
  C. A Public key infrastructure
  D. Key stretching
  D. Key stretching

• Question 108:

  Mirai malware targets loT devices. After infiltration, it uses them to propagate and create botnets that then used to launch which types of attack?

  A. MITM attack
  B. Birthday attack
  C. DDoS attack
  D. Password attack
  C. DDoS attack

• Question 109:

  Jake, a professional hacker, installed spyware on a target iPhone to spy on the target user's activities. He can take complete control of the target mobile device by jailbreaking the device remotely and record audio, capture screenshots, and monitor all phone calls and SMS messages. What is the type of spyware that Jake used to infect the target device?

  A. DroidSheep
  B. Androrat
  C. Zscaler
  D. Trident
  B. Androrat

• Question 110:

  if you send a TCP ACK segment to a known closed port on a firewall but it does not respond with an RST. what do you know about the firewall you are scanning?

  A. There is no firewall in place.
  B. This event does not tell you encrypting about the firewall.
  C. It is a stateful firewall
  D. It Is a non-stateful firewall.
  B. This event does not tell you encrypting about the firewall.