EC-COUNCIL 312-50V11 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V11 Online Questions & Answers

• Question 291:

  To determine if a software program properly handles a wide range of invalid input, a form of automated testing can be used to randomly generate invalid input in an attempt to crash the program. What term is commonly used when referring to this type of testing?

  A. Randomizing
  B. Bounding
  C. Mutating
  D. Fuzzing
  D. Fuzzing

• Question 292:

  John, a professional hacker, targeted CyberSol Inc., an MNC. He decided to discover the loT devices connected in the target network that are using default credentials and are vulnerable to various hijacking attacks. For this purpose, he used an automated tool to scan the target network for specific types of loT devices and detect whether they are using the default, factory-set credentials. What is the tool employed by John in the above scenario?

  A. loTSeeker
  B. loT Inspector
  C. ATandT loT Platform
  D. Azure loT Central
  A. loTSeeker

• Question 293:

  Matthew, a black hat, has managed to open a meterpreter session to one of the kiosk machines in Evil Corp's lobby. He checks his current SID, which is S-1-5-21-1223352397- 1872883824-861252104-501. What needs to happen before Matthew has full administrator access?

  A. He must perform privilege escalation.
  B. He needs to disable antivirus protection.
  C. He needs to gain physical access.
  D. He already has admin privileges, as shown by the "501" at the end of the SID.
  A. He must perform privilege escalation.

• Question 294:

  Bob, a system administrator at TPNQM SA, concluded one day that a DMZ is not needed if he properly configures the firewall to allow access just to servers/ports, which can have direct internet access, and block the access to workstations.

  Bob also concluded that DMZ makes sense just when a stateful firewall is available, which is not the case of TPNQM SA.

  In this context, what can you say?

  A. Bob can be right since DMZ does not make sense when combined with stateless firewalls
  B. Bob is partially right. He does not need to separate networks if he can create rules by destination IPs, one by one
  C. Bob is totally wrong. DMZ is always relevant when the company has internet servers and workstations
  D. Bob is partially right. DMZ does not make sense when a stateless firewall is available
  C. Bob is totally wrong. DMZ is always relevant when the company has internet servers and workstations

• Question 295:

  A regional bank hires your company to perform a security assessment on their network after a recent data breach. The attacker was able to steal financial data from the bank by compromising only a single server. Based on this information, what should be one of your key recommendations to the bank?

  A. Place a front-end web server in a demilitarized zone that only handles external web traffic
  B. Require all employees to change their anti-virus program with a new one
  C. Move the financial data to another server on the same IP subnet
  D. Issue new certificates to the web servers from the root certificate authority
  A. Place a front-end web server in a demilitarized zone that only handles external web traffic

• Question 296:

  From the following table, identify the wrong answer in terms of Range (ft). Standard Range (ft) 802.11a 150-150 802.11b 150-150 802.11g 150-150

  802.16 (WiMax) 30 miles

  A. 802.16 (WiMax)
  B. 802.11g
  C. 802.11b
  D. 802.11a
  A. 802.16 (WiMax)

• Question 297:

  OpenSSL on Linux servers includes a command line tool for testing TLS. What is the name of the tool and the correct syntax to connect to a web server?

  A. openssl s_client -site www.website.com:443
  B. openssl_client -site www.website.com:443
  C. openssl s_client -connect www.website.com:443
  D. openssl_client -connect www.website.com:443
  C. openssl s_client -connect www.website.com:443

• Question 298:

  A large mobile telephony and data network operator has a data center that houses network elements. These are essentially large computers running on Linux. The perimeter of the data center is secured with firewalls and IPS systems.

  What is the best security policy concerning this setup?

  A. Network elements must be hardened with user ids and strong passwords. Regular security tests and audits should be performed.
  B. As long as the physical access to the network elements is restricted, there is no need for additional measures.
  C. There is no need for specific security measures on the network elements as long as firewalls and IPS systems exist.
  D. The operator knows that attacks and down time are inevitable and should have a backup site.
  A. Network elements must be hardened with user ids and strong passwords. Regular security tests and audits should be performed.

• Question 299:

  John, a professional hacker, decided to use DNS to perform data exfiltration on a target network, in this process, he embedded malicious data into the DNS protocol packets that even DNSSEC cannot detect. Using this technique. John successfully injected malware to bypass a firewall and maintained communication with the victim machine and CandC server. What is the technique employed by John to bypass the firewall?

  A. DNS cache snooping
  B. DNSSEC zone walking
  C. DNS tunneling method
  D. DNS enumeration
  C. DNS tunneling method

• Question 300:

  A bank stores and processes sensitive privacy information related to home loans. However, auditing has never been enabled on the system. What is the first step that the bank should take before enabling the audit feature?

  A. Perform a vulnerability scan of the system.
  B. Determine the impact of enabling the audit feature.
  C. Perform a cost/benefit analysis of the audit feature.
  D. Allocate funds for staffing of audit log review.
  B. Determine the impact of enabling the audit feature.