EC-COUNCIL 312-50V12 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V12 Online Questions & Answers

• Question 311:

  A security analyst is performing an audit on the network to determine if there are any deviations from the security policies in place. The analyst discovers that a user from the IT department had a dial-out modem installed. Which security policy must the security analyst check to see if dial-out modems are allowed?

  A. Firewall-management policy
  B. Acceptable-use policy
  C. Permissive policy
  D. Remote-access policy
  D. Remote-access policy

• Question 312:

  Which of the following Linux commands will resolve a domain name into IP address?

  A. >host-t a hackeddomain.com
  B. >host-t ns hackeddomain.com
  C. >host -t soa hackeddomain.com
  D. >host -t AXFR hackeddomain.com
  A. >host-t a hackeddomain.com

• Question 313:

  A zone file consists of which of the following Resource Records (RRs)?

  A. DNS, NS, AXFR, and MX records
  B. DNS, NS, PTR, and MX records
  C. SOA, NS, AXFR, and MX records
  D. SOA, NS, A, and MX records
  D. SOA, NS, A, and MX records

• Question 314:

  An attacker with access to the inside network of a small company launches a successful STP manipulation attack. What will he do next?

  A. He will create a SPAN entry on the spoofed root bridge and redirect traffic to his computer.
  B. He will activate OSPF on the spoofed root bridge.
  C. He will repeat this action so that it escalates to a DoS attack.
  D. He will repeat the same attack against all L2 switches of the network.
  A. He will create a SPAN entry on the spoofed root bridge and redirect traffic to his computer.

• Question 315:

  You need a tool that can do network intrusion prevention and intrusion detection, function as a network sniffer, and record network activity, what tool would you most likely select?

  A. Nmap
  B. Cain and Abel
  C. Nessus
  D. Snort
  D. Snort

• Question 316:

  Which of the following statements about a zone transfer is correct? (Choose three.)

  A. A zone transfer is accomplished with the DNS
  B. A zone transfer is accomplished with the nslookup service
  C. A zone transfer passes all zone information that a DNS server maintains
  D. A zone transfer passes all zone information that a nslookup server maintains
  E. A zone transfer can be prevented by blocking all inbound TCP port 53 connections
  F. Zone transfers cannot occur on the Internet
  A. A zone transfer is accomplished with the DNS
  C. A zone transfer passes all zone information that a DNS server maintains
  E. A zone transfer can be prevented by blocking all inbound TCP port 53 connections

• Question 317:

  Which of the following tools performs comprehensive tests against web servers, including dangerous files and CGIs?

  A. Nikto
  B. John the Ripper
  C. Dsniff
  D. Snort
  A. Nikto
  C. Dsniff

• Question 318:

  Which of the following tactics uses malicious code to redirect users' web traffic?

  A. Spimming
  B. Pharming
  C. Phishing
  D. Spear-phishing
  B. Pharming

• Question 319:

  Which regulation defines security and privacy controls for Federal information systems and organizations?

  A. HIPAA
  B. EU Safe Harbor
  C. PCI-DSS
  D. NIST-800-53
  D. NIST-800-53

  ---

  Explanation/Reference:

  NIST Special Publication 800-53 provides a catalog of security and privacy controls for all U.S. federal information systems except those related to national security. It is published by the National Institute of Standards and Technology, which is a non-regulatory agency of the United States Department of Commerce. NIST develops and issues standards, guidelines, and other publications to assist federal agencies in implementing the Federal Information Security Modernization Act of 2014 (FISMA) and to help with managing cost-effective programs to protect their information and information systems.

• Question 320:

  A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System (OS) version installed. Considering that NMAP result below, which of the following is likely to be installed on the target machine by the OS? Starting NMAP 5.21 at 2011-03-15 11:06 NMAP scan report for 172.16.40.65 Host is up (1.00s latency). Not shown: 993 closed ports PORT STATE SERVICE 21/tcp open ftp 23/tcp open telnet 80/tcp open http 139/tcp open netbios- ssn 515/tcp open 631/tcp open ipp 9100/tcp open MAC Address: 00:00:48:0D:EE:8

  A. The host is likely a Linux machine.
  B. The host is likely a printer.
  C. The host is likely a router.
  D. The host is likely a Windows machine.
  B. The host is likely a printer.