EC-COUNCIL 312-50V11 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V11 Online Questions & Answers

• Question 141:

  A DDOS attack is performed at layer 7 to take down web infrastructure. Partial HTTP requests are sent to the web infrastructure or applications. Upon receiving a partial request, the target servers opens multiple connections and keeps

  waiting for the requests to complete.

  Which attack is being described here?

  A. Desynchronization
  B. Slowloris attack
  C. Session splicing
  D. Phlashing
  B. Slowloris attack

• Question 142:

  Which Nmap switch helps evade IDS or firewalls?

  A. -n/-R
  B. -0N/-0X/-0G
  C. -T
  D. -D
  C. -T

• Question 143:

  Null sessions are un-authenticated connections (not using a username or password.) to an NT or 2000 system. Which TCP and UDP ports must you filter to check null sessions on your network?

  A. 137 and 139
  B. 137 and 443
  C. 139 and 443
  D. 139 and 445
  D. 139 and 445

• Question 144:

  Which of the following is the best countermeasure to encrypting ransomwares?

  A. Use multiple antivirus softwares
  B. Pay a ransom
  C. Keep some generation of off-line backup
  D. Analyze the ransomware to get decryption key of encrypted data
  C. Keep some generation of off-line backup

• Question 145:

  Which of the following is a passive wireless packet analyzer that works on Linux-based systems?

  A. Burp Suite
  B. OpenVAS
  C. tshark
  D. Kismet
  C. tshark

• Question 146:

  When you are testing a web application, it is very useful to employ a proxy tool to save every request and response. You can manually test every request and analyze the response to find vulnerabilities. You can test parameter and headers manually to get more precise results than if using web vulnerability scanners.

  What proxy tool will help you find web vulnerabilities?

  A. Maskgen
  B. Dimitry
  C. Burpsuite
  D. Proxychains
  C. Burpsuite

• Question 147:

  A network admin contacts you. He is concerned that ARP spoofing or poisoning might occur on his network. What are some things he can do to prevent it? Select the best answers.

  A. Use port security on his switches.
  B. Use a tool like ARPwatch to monitor for strange ARP activity.
  C. Use a firewall between all LAN segments.
  D. If you have a small network, use static ARP entries.
  E. Use only static IP addresses on all PC's.
  A. Use port security on his switches.
  B. Use a tool like ARPwatch to monitor for strange ARP activity.
  D. If you have a small network, use static ARP entries.

• Question 148:

  An Intrusion Detection System (IDS) has alerted the network administrator to a possibly malicious sequence of packets sent to a Web server in the network's external DMZ. The packet traffic was captured by the IDS and saved to a PCAP file. What type of network tool can be used to determine if these packets are genuinely malicious or simply a false positive?

  A. Protocol analyzer
  B. Network sniffer
  C. Intrusion Prevention System (IPS)
  D. Vulnerability scanner
  A. Protocol analyzer

• Question 149:

  Firewalls are the software or hardware systems that are able to control and monitor the traffic coming in and out the target network based on pre-defined set of rules. Which of the following types of firewalls can protect against SQL injection attacks?

  A. Data-driven firewall
  B. Packet firewall
  C. Web application firewall
  D. Stateful firewall
  C. Web application firewall

• Question 150:

  An attacker can employ many methods to perform social engineering against unsuspecting employees, including scareware. What is the best example of a scareware attack?

  A. A pop-up appears to a user stating, "You have won a free cruise! Click here to claim your prize!"
  B. A banner appears to a user stating, "Your account has been locked. Click here to reset your password and unlock your account."
  C. A banner appears to a user stating, "Your Amazon order has been delayed. Click here to find out your new delivery date."
  D. A pop-up appears to a user stating, "Your computer may have been infected with spyware. Click here to install an anti-spyware tool to resolve this issue."
  D. A pop-up appears to a user stating, "Your computer may have been infected with spyware. Click here to install an anti-spyware tool to resolve this issue."