EC-COUNCIL EC-COUNCIL Certifications 312-50V7 Questions & Answers

• Question 141:

  An attacker has been successfully modifying the purchase price of items purchased on the company's web site. The security administrators verify the web server and Oracle database have not been compromised directly. They have also verified the Intrusion Detection System (IDS) logs and found no attacks that could have caused this. What is the mostly likely way the attacker has been able to modify the purchase price?

  A. By using SQL injection

  B. By changing hidden form values

  C. By using cross site scripting

  D. By utilizing a buffer overflow attack

  Correct Answer: B

• Question 142:

  Which of the following is an example of IP spoofing?

  A. SQL injections

  B. Man-in-the-middle

  C. Cross-site scripting

  D. ARP poisoning

  Correct Answer: B

• Question 143:

  Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and that a certificate is still valid for specific operations?

  A. Certificate issuance

  B. Certificate validation

  C. Certificate cryptography

  D. Certificate revocation

  Correct Answer: B

• Question 144:

  What is the correct PCAP filter to capture all TCP traffic going to or from host 192.168.0.125 on port 25?

  A. tcp.src == 25 and ip.host == 192.168.0.125

  B. host 192.168.0.125:25

  C. port 25 and host 192.168.0.125

  D. tcp.port == 25 and ip.host == 192.168.0.125

  Correct Answer: D

• Question 145:

  When creating a security program, which approach would be used if senior management is supporting and enforcing the security policy?

  A. A bottom-up approach

  B. A top-down approach

  C. A senior creation approach

  D. An IT assurance approach

  Correct Answer: B

• Question 146:

  Which element of Public Key Infrastructure (PKI) verifies the applicant?

  A. Certificate authority

  B. Validation authority

  C. Registration authority

  D. Verification authority

  Correct Answer: C

• Question 147:

  Which Open Web Application Security Project (OWASP) implements a web application full of known vulnerabilities?

  A. WebBugs

  B. WebGoat

  C. VULN_HTML

  D. WebScarab

  Correct Answer: B

• Question 148:

  A hacker is attempting to use nslookup to query Domain Name Service (DNS). The hacker uses the nslookup interactive mode for the search. Which command should the hacker type into the command shell to request the appropriate records?

  A. Locate type=ns

  B. Request type=ns

  C. Set type=ns

  D. Transfer type=ns

  Correct Answer: C

• Question 149:

  After gaining access to the password hashes used to protect access to a web based application, knowledge of which cryptographic algorithms would be useful to gain access to the application?

  A. SHA1

  B. Diffie-Helman

  C. RSA

  D. AES

  Correct Answer: A

• Question 150:

  How do employers protect assets with security policies pertaining to employee surveillance activities?

  A. Employers promote monitoring activities of employees as long as the employees demonstrate trustworthiness.

  B. Employers use informal verbal communication channels to explain employee monitoring activities to employees.

  C. Employers use network surveillance to monitor employee email traffic, network access, and to record employee keystrokes.

  D. Employers provide employees written statements that clearly discuss the boundaries of monitoring activities and consequences.

  Correct Answer: D