EC-COUNCIL 312-50V11 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V11 Online Questions & Answers

• Question 281:

  Ben purchased a new smartphone and received some updates on it through the OTA method. He received two messages: one with a PIN from the network operator and another asking him to enter the PIN received from the operator. As soon as he entered the PIN, the smartphone started functioning in an abnormal manner. What is the type of attack performed on Ben in the above scenario?

  A. Advanced SMS phishing
  B. Bypass SSL pinning
  C. Phishing
  D. Tap 'n ghost attack
  A. Advanced SMS phishing

• Question 282:

  A Security Engineer at a medium-sized accounting firm has been tasked with discovering how much information can be obtained from the firm's public facing web servers. The engineer decides to start by using netcat to port 80. The engineer receives this output: HTTP/1.1 200 OK Server: Microsoft-IIS/6 Expires: Tue, 17 Jan 2011 01:41:33 GMT Date: Mon, 16 Jan 2011 01:41:33 GMT Content-Type: text/html Accept-Ranges: bytes Last Modified: Wed, 28 Dec 2010 15:32:21 GMT ETag:"b0aac0542e25c31:89d" Content-Length: 7369 Which of the following is an example of what the engineer performed?

  A. Banner grabbing
  B. SQL injection
  C. Whois database query
  D. Cross-site scripting
  A. Banner grabbing

• Question 283:

  The network team has well-established procedures to follow for creating new rules on the firewall. This includes having approval from a manager prior to implementing any new rules. While reviewing the firewall configuration, you notice a recently implemented rule but cannot locate manager approval for it. What would be a good step to have in the procedures for a situation like this?

  A. Have the network team document the reason why the rule was implemented without prior manager approval.
  B. Monitor all traffic using the firewall rule until a manager can approve it.
  C. Do not roll back the firewall rule as the business may be relying upon it, but try to get manager approval as soon as possible.
  D. Immediately roll back the firewall rule until a manager can approve it
  D. Immediately roll back the firewall rule until a manager can approve it

• Question 284:

  A computer science student needs to fill some information into a secured Adobe PDF job application that was received from a prospective employer. Instead of requesting a new document that allowed the forms to be completed, the student decides to write a script that pulls passwords from a list of commonly used passwords to try against the secured PDF until the correct password is found or the list is exhausted.

  Which cryptography attack is the student attempting?

  A. Man-in-the-middle attack
  B. Brute-force attack
  C. Dictionary attack
  D. Session hijacking
  C. Dictionary attack

• Question 285:

  Ethical backer jane Doe is attempting to crack the password of the head of the it department of ABC company. She Is utilizing a rainbow table and notices upon entering a password that extra characters are added to the password after submitting. What countermeasure is the company using to protect against rainbow tables?

  A. Password key hashing
  B. Password salting
  C. Password hashing
  D. Account lockout
  B. Password salting

• Question 286:

  Mr. Omkar performed tool-based vulnerability assessment and found two vulnerabilities. During analysis, he found that these issues are not true vulnerabilities. What will you call these issues?

  A. False positives
  B. True negatives
  C. True positives
  D. False negatives
  A. False positives

• Question 287:

  How can rainbow tables be defeated?

  A. Use of non-dictionary words
  B. All uppercase character passwords
  C. Password salting
  D. Lockout accounts under brute force password cracking attempts
  C. Password salting

• Question 288:

  what firewall evasion scanning technique make use of a zombie system that has low network activity as well as its fragment identification numbers?

  A. Decoy scanning
  B. Packet fragmentation scanning
  C. Spoof source address scanning
  D. Idle scanning
  D. Idle scanning

• Question 289:

  Identify the UDP port that Network Time Protocol (NTP) uses as its primary means of communication?

  A. 113
  B. 69
  C. 123
  D. 161
  C. 123

• Question 290:

  Ralph, a professional hacker, targeted Jane, who had recently bought new systems for her company. After a few days, Ralph contacted Jane while masquerading as a legitimate customer support executive, informing that her systems need to be serviced for proper functioning and that customer support will send a computer technician. Jane promptly replied positively. Ralph entered Jane's company using this opportunity and gathered sensitive information by scanning terminals for passwords, searching for important documents in desks, and rummaging bins. What is the type of attack technique Ralph used on jane?

  A. Dumpster diving
  B. Eavesdropping
  C. Shoulder surfing
  D. impersonation
  D. impersonation