EC-COUNCIL 312-50V11 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V11 Online Questions & Answers

• Question 121:

  You have been authorized to perform a penetration test against a website. You want to use Google dorks to footprint the site but only want results that show file extensions. What Google dork operator would you use?

  A. filetype
  B. ext
  C. inurl
  D. site
  A. filetype

• Question 122:

  A hacker has successfully infected an internet-facing server which he will then use to send junk mail, take part in coordinated attacks, or host junk email content. Which sort of trojan infects this server?

  A. Botnet Trojan
  B. Banking Trojans
  C. Turtle Trojans
  D. Ransomware Trojans
  A. Botnet Trojan

• Question 123:

  You are a security officer of a company. You had an alert from IDS that indicates that one PC on your Intranet is connected to a blacklisted IP address (C2 Server) on the Internet. The IP address was blacklisted just before the alert. You are starting an investigation to roughly analyze the severity of the situation. Which of the following is appropriate to analyze?

  A. IDS log
  B. Event logs on domain controller
  C. Internet Firewall/Proxy log.
  D. Event logs on the PC
  C. Internet Firewall/Proxy log.

• Question 124:

  What does a firewall check to prevent particular ports and applications from getting packets into an organization?

  A. Transport layer port numbers and application layer headers
  B. Presentation layer headers and the session layer port numbers
  C. Network layer headers and the session layer port numbers
  D. Application layer port numbers and the transport layer headers
  A. Transport layer port numbers and application layer headers

• Question 125:

  What is a "Collision attack" in cryptography?

  A. Collision attacks try to get the public key
  B. Collision attacks try to break the hash into three parts to get the plaintext value
  C. Collision attacks try to break the hash into two parts, with the same bytes in each part to get the private key
  D. Collision attacks try to find two inputs producing the same hash
  D. Collision attacks try to find two inputs producing the same hash

• Question 126:

  While performing online banking using a Web browser, a user receives an email that contains a link to an interesting Web site. When the user clicks on the link, another Web browser session starts and displays a video of cats playing a piano. The next business day, the user receives what looks like an email from his bank, indicating that his bank account has been accessed from a foreign country. The email asks the user to call his bank and verify the authorization of a funds transfer that took place. What Web browser-based security vulnerability was exploited to compromise the user?

  A. Clickjacking
  B. Cross-Site Scripting
  C. Cross-Site Request Forgery
  D. Web form input validation
  C. Cross-Site Request Forgery

• Question 127:

  Which of the following is an extremely common IDS evasion technique in the web world?

  A. Spyware
  B. Subnetting
  C. Unicode Characters
  D. Port Knocking
  C. Unicode Characters

• Question 128:

  Based on the following extract from the log of a compromised machine, what is the hacker really trying to steal?

  A. har.txt
  B. SAM file
  C. wwwroot
  D. Repair file
  B. SAM file

• Question 129:

  Which is the first step followed by Vulnerability Scanners for scanning a network?

  A. OS Detection
  B. Firewall detection
  C. TCP/UDP Port scanning
  D. Checking if the remote host is alive
  D. Checking if the remote host is alive

• Question 130:

  Suppose your company has just passed a security risk assessment exercise. The results display that the risk of the breach in the main company application is 50%. Security staff has taken some measures and implemented the necessary controls. After that, another security risk assessment was performed showing that risk has decreased to 10%. The risk threshold for the application is 20%. Which of the following risk decisions will be the best for the project in terms of its successful continuation with the most business profit?

  A. Accept the risk
  B. Introduce more controls to bring risk to 0%
  C. Mitigate the risk
  D. Avoid the risk
  A. Accept the risk