EC-COUNCIL 312-50V7 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V7 Online Questions & Answers

• Question 111:

  You work for Acme Corporation as Sales Manager. The company has tight network security restrictions. You are trying to steal data from the company's Sales database (Sales.xls) and transfer them to your home computer. Your company filters and monitors traffic that leaves from the internal network to the Internet. How will you achieve this without raising suspicion?

  A. Encrypt the Sales.xls using PGP and e-mail it to your personal gmail account
  B. Package the Sales.xls using Trojan wrappers and telnet them back your home computer
  C. You can conceal the Sales.xls database in another file like photo.jpg or other files and send it out in an innocent looking email or file transfer using Steganography techniques
  D. Change the extension of Sales.xls to sales.txt and upload them as attachment to your hotmail account
  C. You can conceal the Sales.xls database in another file like photo.jpg or other files and send it out in an innocent looking email or file transfer using Steganography techniques

• Question 112:

  Neil is closely monitoring his firewall rules and logs on a regular basis. Some of the users have complained to Neil that there are a few employees who are visiting offensive web site during work hours, without any consideration for others. Neil knows that he has an up-to-date content filtering system and such access should not be authorized. What type of technique might be used by these offenders to access the Internet without restriction?

  A. They are using UDP that is always authorized at the firewall
  B. They are using HTTP tunneling software that allows them to communicate with protocols in a way it was not intended
  C. They have been able to compromise the firewall, modify the rules, and give themselves proper access
  D. They are using an older version of Internet Explorer that allow them to bypass the proxy server
  B. They are using HTTP tunneling software that allows them to communicate with protocols in a way it was not intended

• Question 113:

  John runs a Web server, IDS and firewall on his network. Recently his Web server has been under constant hacking attacks. He looks up the IDS log files and sees no intrusion attempts but the Web server constantly locks up and needs rebooting due to various brute force and buffer overflow attacks but still the IDS alerts no intrusion whatsoever. John becomes suspicious and views the Firewall logs and he notices huge SSL connections constantly hitting his Web server. Hackers have been using the encrypted HTTPS protocol to send exploits to the Web server and that was the reason the IDS did not detect the intrusions. How would John protect his network from these types of attacks?

  A. Install a proxy server and terminate SSL at the proxy
  B. Enable the IDS to filter encrypted HTTPS traffic
  C. Install a hardware SSL "accelerator" and terminate SSL at this layer
  D. Enable the Firewall to filter encrypted HTTPS traffic
  A. Install a proxy server and terminate SSL at the proxy
  C. Install a hardware SSL "accelerator" and terminate SSL at this layer

• Question 114:

  A newly discovered flaw in a software application would be considered which kind of security vulnerability?

  A. Input validation flaw
  B. HTTP header injection vulnerability
  C. 0-day vulnerability
  D. Time-to-check to time-to-use flaw
  C. 0-day vulnerability

• Question 115:

  If an attacker's computer sends an IPID of 24333 to a zombie (Idle Scanning) computer on a closed port, what will be the response?

  A. The zombie computer will respond with an IPID of 24334.
  B. The zombie computer will respond with an IPID of 24333.
  C. The zombie computer will not send a response.
  D. The zombie computer will respond with an IPID of 24335.
  A. The zombie computer will respond with an IPID of 24334.

• Question 116:

  Anonymizer sites access the Internet on your behalf, protecting your personal information from disclosure. An anonymizer protects all of your computer's identifying information while it surfs for you, enabling you to remain at least one step

  removed from the sites you visit.

  You can visit Web sites without allowing anyone to gather information on sites visited by you. Services that provide anonymity disable pop-up windows and cookies, and conceal visitor's IP address.

  These services typically use a proxy server to process each HTTP request. When the user requests a Web page by clicking a hyperlink or typing a URL into their browser, the service retrieves and displays the information using its own server.

  The remote server (where the requested Web page resides) receives information on the anonymous Web surfing service in place of your information.

  In which situations would you want to use anonymizer? (Select 3 answers)

  A. Increase your Web browsing bandwidth speed by using Anonymizer
  B. To protect your privacy and Identity on the Internet
  C. To bypass blocking applications that would prevent access to Web sites or parts of sites that you want to visit.
  D. Post negative entries in blogs without revealing your IP identity
  B. To protect your privacy and Identity on the Internet
  C. To bypass blocking applications that would prevent access to Web sites or parts of sites that you want to visit.
  D. Post negative entries in blogs without revealing your IP identity

• Question 117:

  LAN Manager Passwords are concatenated to 14 bytes, and split in half. The two halves are hashed individually. If the password is 7 characters or less, than the second half of the hash is always:

  A. 0xAAD3B435B51404EE
  B. 0xAAD3B435B51404AA
  C. 0xAAD3B435B51404BB
  D. 0xAAD3B435B51404CC
  A. 0xAAD3B435B51404EE

• Question 118:

  When comparing the testing methodologies of Open Web Application Security Project (OWASP) and Open Source Security Testing Methodology Manual (OSSTMM) the main difference is

  A. OWASP is for web applications and OSSTMM does not include web applications.
  B. OSSTMM is gray box testing and OWASP is black box testing.
  C. OWASP addresses controls and OSSTMM does not.
  D. OSSTMM addresses controls and OWASP does not.
  D. OSSTMM addresses controls and OWASP does not.

• Question 119:

  This is an example of whois record.

  

  Sometimes a company shares a little too much information on their organization through public domain records. Based on the above whois record, what can an attacker do? (Select 2 answers)

  A. Search engines like Google, Bing will expose information listed on the WHOIS record
  B. An attacker can attempt phishing and social engineering on targeted individuals using the information from WHOIS record
  C. Spammers can send unsolicited e-mails to addresses listed in the WHOIS record
  D. IRS Agents will use this information to track individuals using the WHOIS record information
  B. An attacker can attempt phishing and social engineering on targeted individuals using the information from WHOIS record
  C. Spammers can send unsolicited e-mails to addresses listed in the WHOIS record

• Question 120:

  A company has five different subnets: 192.168.1.0, 192.168.2.0, 192.168.3.0, 192.168.4.0 and 192.168.5.0. How can NMAP be used to scan these adjacent Class C networks?

  A. NMAP -P 192.168.1-5.
  B. NMAP -P 192.168.0.0/16
  C. NMAP -P 192.168.1.0,2.0,3.0,4.0,5.0
  D. NMAP -P 192.168.1/17
  A. NMAP -P 192.168.1-5.