EC-COUNCIL EC-COUNCIL Certifications 312-50V11 Questions & Answers

• Question 71:

  This kind of password cracking method uses word lists in combination with numbers and special characters:

  A. Hybrid

  B. Linear

  C. Symmetric

  D. Brute Force

  Correct Answer: A

• Question 72:

  Yancey is a network security administrator for a large electric company. This company provides power for over 100, 000 people in Las Vegas. Yancey has worked for his company for over 15 years and has become very successful. One day, Yancey comes in to work and finds out that the company will be downsizing and he will be out of a job in two weeks. Yancey is very angry and decides to place logic bombs, viruses, Trojans, and backdoors all over the network to take down the company once he has left. Yancey does not care if his actions land him in jail for 30 or more years, he just wants the company to pay for what they are doing to him.

  What would Yancey be considered?

  A. Yancey would be considered a Suicide Hacker

  B. Since he does not care about going to jail, he would be considered a Black Hat

  C. Because Yancey works for the company currently; he would be a White Hat

  D. Yancey is a Hacktivist Hacker since he is standing up to a company that is downsizing

  Correct Answer: A

• Question 73:

  What is the following command used for?

  sqlmap.py-u ,,http://10.10.1.20/?p=1andforumaction=search" -dbs

  A. Creating backdoors using SQL injection

  B. A Enumerating the databases in the DBMS for the URL

  C. Retrieving SQL statements being executed on the database

  D. Searching database statements at the IP address given

  Correct Answer: A

• Question 74:

  In order to tailor your tests during a web-application scan, you decide to determine which web-server version is hosting the application. On using the sV flag with Nmap. you obtain the following response:

  80/tcp open http-proxy Apache Server 7.1.6

  what Information-gathering technique does this best describe?

  A. WhOiS lookup

  B. Banner grabbing

  C. Dictionary attack

  D. Brute forcing

  Correct Answer: C

• Question 75:

  Which access control mechanism allows for multiple systems to use a central authentication server (CAS) that permits users to authenticate once and gain access to multiple systems?

  A. Role Based Access Control (RBAC)

  B. Discretionary Access Control (DAC)

  C. Single sign-on

  D. Windows authentication

  Correct Answer: C

• Question 76:

  A pen tester is configuring a Windows laptop for a test. In setting up Wireshark, what river and library are required to allow the NIC to work in promiscuous mode?

  A. Libpcap

  B. Awinpcap

  C. Winprom

  D. Winpcap

  Correct Answer: D

• Question 77:

  Let's imagine three companies (A, B and C), all competing in a challenging global environment. Company

  A and B are working together in developing a product that will generate a major competitive advantage for

  them. Company A has a secure DNS server while company B has a DNS server vulnerable to spoofing.

  With a spoofing attack on the DNS server of company B, company C gains access to outgoing e-mails

  from company B.

  How do you prevent DNS spoofing?

  A. Install DNS logger and track vulnerable packets

  B. Disable DNS timeouts

  C. Install DNS Anti-spoofing

  D. Disable DNS Zone Transfer

  Correct Answer: C

• Question 78:

  Clark, a professional hacker, attempted to perform a Btlejacking attack using an automated tool, Btlejack, and hardware tool, micro:bit. This attack allowed Clark to hijack, read, and export sensitive information shared between connected devices. To perform this attack, Clark executed various btlejack commands. Which of the following commands was used by Clark to hijack the connections?

  A. btlejack-f 0x129f3244-j

  B. btlejack -c any

  C. btlejack -d /dev/ttyACM0 -d /dev/ttyACM2 -s

  D. btlejack -f 0x9c68fd30 -t -m 0x1 fffffffff

  Correct Answer: D

• Question 79:

  Which of the following statements is FALSE with respect to Intrusion Detection Systems?

  A. Intrusion Detection Systems can be configured to distinguish specific content in network packets

  B. Intrusion Detection Systems can easily distinguish a malicious payload in an encrypted traffic

  C. Intrusion Detection Systems require constant update of the signature library

  D. Intrusion Detection Systems can examine the contents of the data n context of the network protocol

  Correct Answer: B

• Question 80:

  MX record priority increases as the number increases. (True/False.)

  A. True

  B. False

  Correct Answer: B