EC-COUNCIL 312-50V11 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V11 Online Questions & Answers

• Question 401:

  Sam, a professional hacker. targeted an organization with intention of compromising AWS IAM credentials. He attempted to lure one of the employees of the organization by initiating fake calls while posing as a legitimate employee. Moreover, he sent phishing emails to steal the AWS 1AM credentials and further compromise the employee's account. What is the technique used by Sam to compromise the AWS IAM credentials?

  A. Social engineering
  B. insider threat
  C. Password reuse
  D. Reverse engineering
  A. Social engineering

• Question 402:

  Scenario: Joe turns on his home computer to access personal online banking. When he enters the URL www.bank.com. the website is displayed, but it prompts him to re-enter his credentials as if he has never visited the site before. When he examines the website URL closer, he finds that the site is not secure and the web address appears different. What type of attack he is experiencing?.

  A. Dos attack
  B. DHCP spoofing
  C. ARP cache poisoning
  D. DNS hijacking
  D. DNS hijacking

• Question 403:

  When discussing passwords, what is considered a brute force attack?

  A. You attempt every single possibility until you exhaust all possible combinations or discover the password
  B. You threaten to use the rubber hose on someone unless they reveal their password
  C. You load a dictionary of words into your cracking program
  D. You create hashes of a large number of words and compare it with the encrypted passwords
  E. You wait until the password expires
  A. You attempt every single possibility until you exhaust all possible combinations or discover the password

• Question 404:

  Your company performs penetration tests and security assessments for small and medium- sized business in the local area. During a routine security assessment, you discover information that suggests your client is involved with human trafficking.

  What should you do?

  A. Confront the client in a respectful manner and ask her about the data.
  B. Copy the data to removable media and keep it in case you need it.
  C. Ignore the data and continue the assessment until completed as agreed.
  D. Immediately stop work and contact the proper legal authorities.
  D. Immediately stop work and contact the proper legal authorities.

• Question 405:

  E-mail scams and mail fraud are regulated by which of the following?

  A. 18 U.S.C. par. 1030 Fraud and Related activity in connection with Computers
  B. 18 U.S.C. par. 1029 Fraud and Related activity in connection with Access Devices
  C. 18 U.S.C. par. 1362 Communication Lines, Stations, or Systems
  D. 18 U.S.C. par. 2510 Wire and Electronic Communications Interception and Interception of Oral Communication
  A. 18 U.S.C. par. 1030 Fraud and Related activity in connection with Computers

• Question 406:

  What is the purpose of DNS AAAA record?

  A. Authorization, Authentication and Auditing record
  B. Address prefix record
  C. Address database record
  D. IPv6 address resolution record
  D. IPv6 address resolution record

• Question 407:

  Which results will be returned with the following Google search query? site:target.com site:Marketing.target.com accounting

  A. Results from matches on the site marketing.target.com that are in the domain target.com but do not include the word accounting.
  B. Results matching all words in the query.
  C. Results for matches on target.com and Marketing.target.com that include the word "accounting"
  D. Results matching "accounting" in domain target.com but not on the site Marketing.target.com
  D. Results matching "accounting" in domain target.com but not on the site Marketing.target.com

• Question 408:

  Study the snort rule given below and interpret the rule. alert tcp any any --> 192.168.1.0/24 (content:"|00 01 86 a5|"; msG. "mountd access";)

  A. An alert is generated when a TCP packet is generated from any IP on the 192.168.1.0 subnet and destined to any IP on port 111
  B. An alert is generated when any packet other than a TCP packet is seen on the network and destined for the 192.168.1.0 subnet
  C. An alert is generated when a TCP packet is originated from port 111 of any IP address to the 192.168.1.0 subnet
  D. An alert is generated when a TCP packet originating from any IP address is seen on the network and destined for any IP address on the 192.168.1.0 subnet on port 111
  D. An alert is generated when a TCP packet originating from any IP address is seen on the network and destined for any IP address on the 192.168.1.0 subnet on port 111

• Question 409:

  Heather's company has decided to use a new customer relationship management tool. After performing the appropriate research, they decided to purchase a subscription to a cloud-hosted solution. The only administrative task that Heather will need to perform is the management of user accounts. The provider will take care of the hardware, operating system, and software administration including patching and monitoring. Which of the following is this type of solution?

  A. SaaS
  B. IaaS
  C. CaaS
  D. PasS
  A. SaaS

• Question 410:

  You want to analyze packets on your wireless network. Which program would you use?

  A. Wireshark with Airpcap
  B. Airsnort with Airpcap
  C. Wireshark with Winpcap
  D. Ethereal with Winpcap
  A. Wireshark with Airpcap