EC-COUNCIL 312-50V7 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V7 Online Questions & Answers

• Question 91:

  In which step Steganography fits in CEH System Hacking Cycle (SHC)

  A. Step 2: Crack the password
  B. Step 1: Enumerate users
  C. Step 3: Escalate privileges
  D. Step 4: Execute applications
  E. Step 5: Hide files
  F. Step 6: Cover your tracks
  E. Step 5: Hide files

• Question 92:

  Charlie is the network administrator for his company. Charlie just received a new Cisco router and wants to test its capabilities out and to see if it might be susceptible to a DoS attack resulting in its locking up. The IP address of the Cisco switch is 172.16.0.45. What command can Charlie use to attempt this task?

  A. Charlie can use the commanD. ping -l 56550 172.16.0.45 -t.
  B. Charlie can try using the commanD. ping 56550 172.16.0.45.
  C. By using the command ping 172.16.0.45 Charlie would be able to lockup the router
  D. He could use the commanD. ping -4 56550 172.16.0.45.
  A. Charlie can use the commanD. ping -l 56550 172.16.0.45 -t.

• Question 93:

  What port number is used by LDAP protocol?

  A. 110
  B. 389
  C. 464
  D. 445
  B. 389

• Question 94:

  Which of the following are variants of mandatory access control mechanisms? (Choose two.)

  A. Two factor authentication
  B. Acceptable use policy
  C. Username / password
  D. User education program
  E. Sign in register
  A. Two factor authentication
  C. Username / password

• Question 95:

  Least privilege is a security concept that requires that a user is

  A. limited to those functions required to do the job.
  B. given root or administrative privileges.
  C. trusted to keep all data and access to that data under their sole control.
  D. given privileges equal to everyone else in the department.
  A. limited to those functions required to do the job.

• Question 96:

  Which cipher encrypts the plain text digit (bit or byte) one by one?

  A. Classical cipher
  B. Block cipher
  C. Modern cipher
  D. Stream cipher
  D. Stream cipher

• Question 97:

  This attack uses social engineering techniques to trick users into accessing a fake Web site and divulging personal information. Attackers send a legitimate- looking e-mail asking users to update their information on the company's Web site, but the URLs in the e-mail actually point to a false Web site.

  A. Wiresharp attack
  B. Switch and bait attack
  C. Phishing attack
  D. Man-in-the-Middle attack
  C. Phishing attack

• Question 98:

  How do you defend against ARP Poisoning attack? (Select 2 answers)

  

  A. Enable DHCP Snooping Binding Table
  B. Restrict ARP Duplicates
  C. Enable Dynamic ARP Inspection
  D. Enable MAC snooping Table
  A. Enable DHCP Snooping Binding Table
  C. Enable Dynamic ARP Inspection

• Question 99:

  A security consultant decides to use multiple layers of anti-virus defense, such as end user desktop anti- virus and E-mail gateway. This approach can be used to mitigate which kind of attack?

  A. Forensic attack
  B. ARP spoofing attack
  C. Social engineering attack
  D. Scanning attack
  C. Social engineering attack

• Question 100:

  An Attacker creates a zuckerjournals.com website by copying and mirroring HACKERJOURNALS.COM site to spread the news that Hollywood actor Jason Jenkins died in a car accident. The attacker then submits his fake site for indexing in major search engines. When users search for "Jason Jenkins", attacker's fake site shows up and dupes victims by the fake news.

  

  This is another great example that some people do not know what URL's are. Real website: Fake website: http://www.zuckerjournals.com

  

  The website is clearly not WWW.HACKERJOURNALS.COM. It is obvious for many, but unfortunately some people still do not know what an URL is. It's the address that you enter into the address bar at the top your browser and this is clearly not legit site, its www.zuckerjournals.com

  How would you verify if a website is authentic or not?

  A. Visit the site using secure HTTPS protocol and check the SSL certificate for authenticity
  B. Navigate to the site by visiting various blogs and forums for authentic links
  C. Enable Cache on your browser and lookout for error message warning on the screen
  D. Visit the site by clicking on a link from Google search engine
  D. Visit the site by clicking on a link from Google search engine