EC-COUNCIL 312-50V7 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V7 Online Questions & Answers

• Question 1:

  Blake is in charge of securing all 20 of his company's servers. He has enabled hardware and software firewalls, hardened the operating systems, and disabled all unnecessary services on all the servers. Unfortunately, there is proprietary AS400 emulation software that must run on one of the servers that requires the telnet service to function properly. Blake is especially concerned about this since telnet can be a very large security risk in an organization. Blake is concerned about how this particular server might look to an outside attacker so he decides to perform some footprinting, scanning, and penetration tests on the server. Blake telnets into the server using Port 80 and types in the following command:

  HEAD / HTTP/1.0

  After pressing enter twice, Blake gets the following results: What has Blake just accomplished?

  

  A. Downloaded a file to his local computer
  B. Submitted a remote command to crash the server
  C. Poisoned the local DNS cache of the server
  D. Grabbed the Operating System banner
  D. Grabbed the Operating System banner

• Question 2:

  Which of the following examples best represents a logical or technical control?

  A. Security tokens
  B. Heating and air conditioning
  C. Smoke and fire alarms
  D. Corporate security policy
  A. Security tokens

• Question 3:

  Which of the following is an advantage of utilizing security testing methodologies to conduct a security audit?

  A. They provide a repeatable framework.
  B. Anyone can run the command line scripts.
  C. They are available at low cost.
  D. They are subject to government regulation.
  A. They provide a repeatable framework.

• Question 4:

  An NMAP scan of a server shows port 25 is open. What risk could this pose?

  A. Open printer sharing
  B. Web portal data leak
  C. Clear text authentication
  D. Active mail relay
  D. Active mail relay

• Question 5:

  What is one thing a tester can do to ensure that the software is trusted and is not changing or tampering with critical data on the back end of a system it is loaded on?

  A. Proper testing
  B. Secure coding principles
  C. Systems security and architecture review
  D. Analysis of interrupts within the software
  D. Analysis of interrupts within the software

• Question 6:

  If an attacker's computer sends an IPID of 31400 to a zombie (Idle Scanning) computer on an open port, what will be the response?

  A. 31400
  B. 31402
  C. The zombie will not send a response
  D. 31401
  B. 31402

• Question 7:

  A network administrator received an administrative alert at 3:00 a.m. from the intrusion detection system. The alert was generated because a large number of packets were coming into the network over ports 20 and 21. During analysis, there were no signs of attack on the FTP servers. How should the administrator classify this situation?

  A. True negatives
  B. False negatives
  C. True positives
  D. False positives
  D. False positives

• Question 8:

  Which type of security document is written with specific step-by-step details?

  A. Process
  B. Procedure
  C. Policy
  D. Paradigm
  B. Procedure

• Question 9:

  You just purchased the latest DELL computer, which comes pre-installed with Windows 7, McAfee antivirus software and a host of other applications. You want to connect Ethernet wire to your cable modem and start using the computer immediately. Windows is dangerously insecure when unpacked from the box, and there are a few things that you must do before you use it.

  A. New installation of Windows should be patched by installing the latest service packs and hotfixes
  B. Key applications such as Adobe Acrobat, Macromedia Flash, Java, Winzip etc., must have the latest security patches installed
  C. Install a personal firewall and lock down unused ports from connecting to your computer
  D. Install the latest signatures for Antivirus software
  E. Configure "Windows Update" to automatic
  F. Create a non-admin user with a complex password and logon to this account
  G. You can start using your computer as vendors such as DELL, HP and IBM would have already installed the latest service packs.
  A. New installation of Windows should be patched by installing the latest service packs and hotfixes
  C. Install a personal firewall and lock down unused ports from connecting to your computer
  D. Install the latest signatures for Antivirus software
  E. Configure "Windows Update" to automatic
  F. Create a non-admin user with a complex password and logon to this account

• Question 10:

  Kevin is an IT security analyst working for Emerson Time Makers, a watch manufacturing company in Miami. Kevin and his girlfriend Katy recently broke up after a big fight. Kevin believes that she was seeing another person. Kevin, who has an online email account that he uses for most of his mail, knows that Katy has an account with that same company. Kevin logs into his email account online and gets the following URL after successfully logged in: http:// www.youremailhere.com/ mail.asp? mailbox=KevinandSmith=121%22 Kevin changes the URL to: http://www.youremailhere.com/mail.asp? mailbox=KatyandSanchez=121%22 Kevin is trying to access her email account to see if he can find out any information. What is Kevin attempting here to gain access to Katy's mailbox?

  A. This type of attempt is called URL obfuscation when someone manually changes a URL to try and gain unauthorized access
  B. By changing the mailbox's name in the URL, Kevin is attempting directory transversal
  C. Kevin is trying to utilize query string manipulation to gain access to her email account
  D. He is attempting a path-string attack to gain access to her mailbox
  C. Kevin is trying to utilize query string manipulation to gain access to her email account