EC-COUNCIL 312-50V13 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V13 Online Questions & Answers

• Question 1:

  You are a security officer of a company. You had an alert from IDS that indicates that one PC on your Intranet is connected to a blacklisted IP address (C2 Server) on the Internet. The IP address was blacklisted just before the alert. You are starting an investigation to roughly analyze the severity of the situation. Which of the following is appropriate to analyze?

  A. IDS log
  B. Event logs on domain controller
  C. Internet Firewall/Proxy log.
  D. Event logs on the PC
  C. Internet Firewall/Proxy log.

• Question 2:

  As part of a college project, you have set up a web server for hosting your team's application. Given your interest in cybersecurity, you have taken the lead in securing the server. You are aware that hackers often attempt to exploit server misconfigurations. Which of the following actions would best protect your web server from potential misconfiguration- based attacks?

  A. Performing regular server configuration audits
  B. Enabling multi-factor authentication for users
  C. Implementing a firewall to filter traffic
  D. Regularly backing up server data
  A. Performing regular server configuration audits

• Question 3:

  Which of the following types of SQL injection attacks extends the results returned by the original query, enabling attackers to run two or more statements if they have the same structure as the original one?

  A. Error-based injection
  B. Boolean-based blind SQL injection
  C. Blind SQL injection
  D. Union SQL injection
  C. Blind SQL injection

• Question 4:

  You are an ethical hacker contracted to conduct a security audit for a company. During the audit, you discover that the company's wireless network is using WEP encryption. You understand the vulnerabilities associated with WEP and plan to recommend a more secure encryption method. Which of the following would you recommend as a Suitable replacement to enhance the security of the company's wireless network?

  A. MAC address filtering
  B. WPA2-PSK with AES encryption
  C. Open System authentication
  D. SSID broadcast disabling
  B. WPA2-PSK with AES encryption

• Question 5:

  Shiela is an information security analyst working at HiTech Security Solutions. She is performing service version discovery using Nmap to obtain information about the running services and their versions on a target system. Which of the following Nmap options must she use to perform service version discovery on the target host?

  A. -SN
  B. -SX
  C. -sV
  D. -SF
  C. -sV

• Question 6:

  Miley, a professional hacker, decided to attack a target organization's network. To perform the attack, she used a tool to send fake ARP messages over the target network to link her MAC address with the target system's IP address. By performing this, Miley received messages directed to the victim's MAC address and further used the tool to intercept, steal, modify, and block sensitive communication to the target system. What is the tool employed by Miley to perform the above attack?

  A. Gobbler
  B. KDerpNSpoof
  C. BetterCAP
  D. Wireshark
  C. BetterCAP

• Question 7:

  As a cybersecurity analyst for SecureNet, you are performing a security assessment of a new mobile payment application. One of your primary concerns is the secure storage of customer data on the device. The application stores sensitive information such as credit card details and personal identification numbers (PINs) on the device. Which of the following measures would best ensure the security of this data?

  A. Implement biometric authentication for app access.
  B. Encrypt all sensitive data stored on the device.
  C. Enable GPS tracking for all devices using the app.
  D. Regularly update the app to the latest version.
  B. Encrypt all sensitive data stored on the device.

• Question 8:

  A large enterprise has been experiencing sporadic system crashes and instability, resulting in limited access to its web services. The security team suspects it could be a result of a Denial of Service (DoS) attack. A significant increase in traffic was noticed in the network logs, with patterns suggesting packet sizes exceeding the prescribed size limit. Which among the following DoS attack techniques best describes this scenario?

  A. UDP flood attack
  B. Smurf attack
  C. Pulse wave attack
  D. Ping of Death attack
  D. Ping of Death attack

• Question 9:

  Sarah, a system administrator, was alerted of potential malicious activity on the network of her company. She discovered a malicious program spread through the instant messenger application used by her team. The attacker had obtained access to one of her teammate's messenger accounts and started sending files across the contact list. Which best describes the attack scenario and what measure could have prevented it?

  A. Instant Messenger Applications; verifying the sender's identity before opening any files
  B. Insecure Patch Management; updating application software regularly
  C. Rogue/Decoy Applications; ensuring software is labeled as TRUSTED
  D. Portable Hardware Media/Removable Devices; disabling Autorun functionality
  A. Instant Messenger Applications; verifying the sender's identity before opening any files

• Question 10:

  An ethical hacker has been tasked with assessing the security of a major corporation's network. She suspects the network uses default SNMP community strings. To exploit this, she plans to extract valuable network information using SNMP enumeration. Which tool could best help her to get the information without directly modifying any parameters within the SNMP agent's management information base (MIB)?

  A. snmp-check (snmp_enum Module) to gather a wide array of information about the target
  B. Nmap, with a script to retrieve all running SNMP processes and associated ports
  C. Oputits, are mainly designed for device management and not SNMP enumeration
  D. SnmpWalk, with a command to change an OID to a different value
  A. snmp-check (snmp_enum Module) to gather a wide array of information about the target