EC-COUNCIL 312-50V11 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V11 Online Questions & Answers

• Question 351:

  Which of the following LM hashes represent a password of less than 8 characters? (Choose two.)

  A. BA810DBA98995F1817306D272A9441BB
  B. 44EFCE164AB921CQAAD3B435B51404EE
  C. 0182BD0BD4444BF836077A718CCDF409
  D. CEC52EB9C8E3455DC2265B23734E0DAC
  E. B757BF5C0D87772FAAD3B435B51404EE
  F. E52CAC67419A9A224A3B108F3FA6CB6D
  B. 44EFCE164AB921CQAAD3B435B51404EE
  E. B757BF5C0D87772FAAD3B435B51404EE

• Question 352:

  What information security law or standard aims at protecting stakeholders and the general public from accounting errors and fraudulent activities within organizations?

  A. PCI-DSS
  B. FISMA
  C. SOX
  D. ISO/I EC 27001:2013
  C. SOX

• Question 353:

  What do Trinoo, TFN2k, WinTrinoo, T-Sight, and Stracheldraht have in common?

  A. All are hacking tools developed by the legion of doom
  B. All are tools that can be used not only by hackers, but also security personnel
  C. All are DDOS tools
  D. All are tools that are only effective against Windows
  E. All are tools that are only effective against Linux
  C. All are DDOS tools

• Question 354:

  Which command can be used to show the current TCP/IP connections?

  A. Netsh
  B. Netstat
  C. Net use connection
  D. Net use
  A. Netsh

• Question 355:

  You are programming a buffer overflow exploit and you want to create a NOP sled of 200 bytes in the program exploit.c

  

  What is the hexadecimal value of NOP instruction?

  A. 0x60
  B. 0x80
  C. 0x70
  D. 0x90
  D. 0x90

• Question 356:

  An attacker attaches a rogue router in a network. He wants to redirect traffic to a LAN attached to his router as part of a man-in-the-middle attack. What measure on behalf of the legitimate admin can mitigate this attack?

  A. Make sure that legitimate network routers are configured to run routing protocols with authentication.
  B. Disable all routing protocols and only use static routes
  C. Only using OSPFv3 will mitigate this risk.
  D. Redirection of the traffic cannot happen unless the admin allows it explicitly.
  A. Make sure that legitimate network routers are configured to run routing protocols with authentication.

• Question 357:

  DNS cache snooping is a process of determining if the specified resource address is present in the DNS cache records. It may be useful during the examination of the network to determine what software update resources are used, thus discovering what software is installed.

  What command is used to determine if the entry is present in DNS cache?

  A. nslookup -fullrecursive update.antivirus.com
  B. dnsnooping -rt update.antivirus.com
  C. nslookup -norecursive update.antivirus.com
  D. dns --snoop update.antivirus.com
  C. nslookup -norecursive update.antivirus.com

• Question 358:

  An organization has automated the operation of critical infrastructure from a remote location. For this purpose, all the industrial control systems are connected to the Internet. To empower the manufacturing process, ensure the reliability of industrial networks, and reduce downtime and service disruption, the organization deckled to install an OT security tool that further protects against security incidents such as cyber espionage, zero-day attacks, and malware. Which of the following tools must the organization employ to protect its critical infrastructure?

  A. Robotium
  B. BalenaCloud
  C. Flowmon
  D. IntentFuzzer
  B. BalenaCloud

• Question 359:

  Attacker Rony installed a rogue access point within an organization's perimeter and attempted to intrude into its internal network. Johnson, a security auditor, identified some unusual traffic in the internal network that is aimed at cracking the authentication mechanism. He immediately turned off the targeted network and tested for any weak and outdated security mechanisms that are open to attack. What is the type of vulnerability assessment performed by johnson in the above scenario?

  A. Host-based assessment
  B. Wireless network assessment
  C. Application assessment
  D. Distributed assessment
  B. Wireless network assessment

• Question 360:

  Which tier in the N-tier application architecture is responsible for moving and processing data between the tiers?

  A. Presentation tier
  B. Application Layer
  C. Logic tier
  D. Data tier
  C. Logic tier