EC-COUNCIL EC-COUNCIL Certifications 312-50V7 Questions & Answers

• Question 101:

  The Open Web Application Security Project (OWASP) testing methodology addresses the need to secure web applications by providing which one of the following services?

  A. An extensible security framework named COBIT

  B. A list of flaws and how to fix them

  C. Web application patches

  D. A security certification for hardened web applications

  Correct Answer: B

• Question 102:

  Which of the following is a symmetric cryptographic standard?

  A. DSA

  B. PKI

  C. RSA

  D. 3DES

  Correct Answer: D

• Question 103:

  Which of the following cryptography attack methods is usually performed without the use of a computer?

  A. Ciphertext-only attack

  B. Chosen key attack

  C. Rubber hose attack

  D. Rainbow table attack

  Correct Answer: C

• Question 104:

  What technique is used to perform a Connection Stream Parameter Pollution (CSPP) attack?

  A. Injecting parameters into a connection string using semicolons as a separator

  B. Inserting malicious Javascript code into input parameters

  C. Setting a user's session identifier (SID) to an explicit known value

  D. Adding multiple parameters with the same name in HTTP requests

  Correct Answer: A

• Question 105:

  Which of the following open source tools would be the best choice to scan a network for potential targets?

  A. NMAP

  B. NIKTO

  C. CAIN

  D. John the Ripper

  Correct Answer: A

• Question 106:

  Which of the following levels of algorithms does Public Key Infrastructure (PKI) use?

  A. RSA 1024 bit strength

  B. AES 1024 bit strength

  C. RSA 512 bit strength

  D. AES 512 bit strength

  Correct Answer: A

• Question 107:

  Which of the following is a primary service of the U.S. Computer Security Incident Response Team (CSIRT)?

  A. CSIRT provides an incident response service to enable a reliable and trusted single point of contact for reporting computer security incidents worldwide.

  B. CSIRT provides a computer security surveillance service to supply a government with important intelligence information on individuals travelling abroad.

  C. CSIRT provides a penetration testing service to support exception reporting on incidents worldwide by individuals and multi-national corporations.

  D. CSIRT provides a vulnerability assessment service to assist law enforcement agencies with profiling an individual's property or company's asset.

  Correct Answer: A

• Question 108:

  Which of the following is a client-server tool utilized to evade firewall inspection?

  A. tcp-over-dns

  B. kismet

  C. nikto

  D. hping

  Correct Answer: A

• Question 109:

  Fingerprinting VPN firewalls is possible with which of the following tools?

  A. Angry IP

  B. Nikto

  C. Ike-scan

  D. Arp-scan

  Correct Answer: C

• Question 110:

  A company has publicly hosted web applications and an internal Intranet protected by a firewall. Which technique will help protect against enumeration?

  A. Reject all invalid email received via SMTP.

  B. Allow full DNS zone transfers.

  C. Remove A records for internal hosts.

  D. Enable null session pipes.

  Correct Answer: C