EC-COUNCIL 312-50V11 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V11 Online Questions & Answers

• Question 431:

  Consider the following Nmap output: what command-line parameter could you use to determine the type and version number of the web server?

  

  A. -sv
  B. -Pn
  C. -V
  D. -ss
  A. -sv

• Question 432:

  You just set up a security system in your network. In what kind of system would you find the following string of characters used as a rule within its configuration? alert tcp any any -> 192.168.100.0/24 21 (msg: ""FTP on the network!"";)

  A. A firewall IPTable
  B. FTP Server rule
  C. A Router IPTable
  D. An Intrusion Detection System
  D. An Intrusion Detection System

• Question 433:

  Chandler works as a pen-tester in an IT-firm in New York. As a part of detecting viruses in the systems, he uses a detection method where the anti-virus executes the malicious codes on a virtual machine to simulate CPU and memory activities. Which type of virus detection method did Chandler use in this context?

  A. Heuristic Analysis
  B. Code Emulation
  C. Scanning
  D. Integrity checking
  B. Code Emulation

• Question 434:

  Which type of attack attempts to overflow the content-addressable memory (CAM) table in an Ethernet switch?

  A. Evil twin attack
  B. DNS cache flooding
  C. MAC flooding
  D. DDoS attack
  C. MAC flooding

• Question 435:

  What is one of the advantages of using both symmetric and asymmetric cryptography in SSL/TLS?

  A. Symmetric algorithms such as AES provide a failsafe when asymmetric methods fail.
  B. Asymmetric cryptography is computationally expensive in comparison. However, it is well-suited to securely negotiate keys for use with symmetric cryptography.
  C. Symmetric encryption allows the server to securely transmit the session keys out-of- band.
  D. Supporting both types of algorithms allows less-powerful devices such as mobile phones to use symmetric encryption instead.
  D. Supporting both types of algorithms allows less-powerful devices such as mobile phones to use symmetric encryption instead.

• Question 436:

  One of your team members has asked you to analyze the following SOA record.

  What is the TTL? Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.)

  A. 200303028
  B. 3600
  C. 604800
  D. 2400
  E. 60
  F. 4800
  D. 2400

• Question 437:

  While using your bank's online servicing you notice the following string in the URL bar:

  "http: // www. MyPersonalBank.com/account?id=368940911028389andDamount=10980andCamount=21"

  You observe that if you modify the Damount and Camount values and submit the request, that data on the web page reflects the changes.

  Which type of vulnerability is present on this site?

  A. Cookie Tampering
  B. SQL Injection
  C. Web Parameter Tampering
  D. XSS Reflection
  C. Web Parameter Tampering

• Question 438:

  If executives are found liable for not properly protecting their company's assets and information systems, what type of law would apply in this situation?

  A. Criminal
  B. International
  C. Common
  D. Civil
  D. Civil

• Question 439:

  Yancey is a network security administrator for a large electric company. This company provides power for over 100, 000 people in Las Vegas. Yancey has worked for his company for over 15 years and has become very successful. One day, Yancey comes in to work and finds out that the company will be downsizing and he will be out of a job in two weeks. Yancey is very angry and decides to place logic bombs, viruses, Trojans, and backdoors all over the network to take down the company once he has left. Yancey does not care if his actions land him in jail for 30 or more years, he just wants the company to pay for what they are doing to him.

  What would Yancey be considered?

  A. Yancey would be considered a Suicide Hacker
  B. Since he does not care about going to jail, he would be considered a Black Hat
  C. Because Yancey works for the company currently; he would be a White Hat
  D. Yancey is a Hacktivist Hacker since he is standing up to a company that is downsizing
  A. Yancey would be considered a Suicide Hacker

• Question 440:

  What port number is used by LDAP protocol?

  A. 110
  B. 389
  C. 464
  D. 445
  B. 389