EC-COUNCIL 312-50V11 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V11 Online Questions & Answers

• Question 321:

  What kind of detection techniques is being used in antivirus softwares that identifies malware by collecting data from multiple protected systems and instead of analyzing files locally it's made on the premiers environment?

  A. VCloud based
  B. Honypot based
  C. Behaviour based
  D. Heuristics based
  A. VCloud based

• Question 322:

  In the field of cryptanalysis, what is meant by a "rubber-hose" attack?

  A. Forcing the targeted keystream through a hardware-accelerated device such as an ASIC.
  B. A backdoor placed into a cryptographic algorithm by its creator.
  C. Extraction of cryptographic secrets through coercion or torture.
  D. Attempting to decrypt ciphertext by making logical assumptions about the contents of the original plaintext.
  C. Extraction of cryptographic secrets through coercion or torture.

• Question 323:

  When you are getting information about a web server, it is very important to know the HTTP Methods (GET, POST, HEAD, PUT, DELETE, TRACE) that are available because there are two critical methods (PUT and DELETE). PUT can upload a file to the server and DELETE can delete a file from the server. You can detect all these methods (GET, POST, HEAD, DELETE, PUT, TRACE) using NMAP script engine. What Nmap script will help you with this task?

  A. http-methods
  B. http enum
  C. http-headers
  D. http-git
  A. http-methods

• Question 324:

  Hackers often raise the trust level of a phishing message by modeling the email to look similar to the internal email used by the target company. This includes using logos, formatting, and names of the target company. The phishing message will often use the name of the company CEO, President, or Managers. The time a hacker spends performing research to locate this information about a company is known as?

  A. Exploration
  B. Investigation
  C. Reconnaissance
  D. Enumeration
  C. Reconnaissance

• Question 325:

  There are multiple cloud deployment options depending on how isolated a customer's resources are from those of other customers. Shared environments share the costs and allow each customer to enjoy lower operations expenses. One solution Is for a customer to Join with a group of users or organizations to share a cloud environment. What is this cloud deployment option called?

  A. Hybrid
  B. Community
  C. Public
  D. Private
  B. Community

• Question 326:

  Jim, a professional hacker, targeted an organization that is operating critical Industrial Infrastructure. Jim used Nmap to scan open pons and running services on systems connected to the organization's OT network. He used an Nmap command to identify Ethernet/IP devices connected to the Internet and further gathered Information such as the vendor name, product code and name, device name, and IP address. Which of the following Nmap commands helped Jim retrieve the required information?

  A. nmap -Pn -sT --scan-delay 1s --max-parallelism 1 -p < Port List > < Target IP >
  B. nmap -Pn -sU -p 44818 --script enip-info < Target IP >
  C. nmap -Pn -sT -p 46824 < Target IP >
  D. nmap -Pn -sT -p 102 --script s7-info < Target IP >
  B. nmap -Pn -sU -p 44818 --script enip-info < Target IP >

• Question 327:

  Which Intrusion Detection System is the best applicable for large environments where critical assets on the network need extra scrutiny and is ideal for observing sensitive network segments?

  A. Honeypots
  B. Firewalls
  C. Network-based intrusion detection system (NIDS)
  D. Host-based intrusion detection system (HIDS)
  C. Network-based intrusion detection system (NIDS)

• Question 328:

  One of your team members has asked you to analyze the following SOA record. What is the version? Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.) (Choose four.)

  A. 200303028
  B. 3600
  C. 604800
  D. 2400
  E. 60
  F. 4800
  A. 200303028

• Question 329:

  SQL injection (SQLi) attacks attempt to inject SQL syntax into web requests, which may Bypass authentication and allow attackers to access and/or modify data attached to a web application. Which of the following SQLI types leverages a database server's ability to make DNS requests to pass data to an attacker?

  A. Union-based SQLI
  B. Out-of-band SQLI
  C. ln-band SQLI
  D. Time-based blind SQLI
  B. Out-of-band SQLI

• Question 330:

  A hacker is an intelligent individual with excellent computer skills and the ability to explore a computer's software and hardware without the owner's permission. Their intention can either be to simply gain knowledge or to illegally make changes.

  Which of the following class of hacker refers to an individual who works both offensively and defensively at various times?

  A. White Hat
  B. Suicide Hacker
  C. Gray Hat
  D. Black Hat
  C. Gray Hat