EC-COUNCIL EC-COUNCIL Certifications 312-50V7 Questions & Answers

• Question 151:

  When analyzing the IDS logs, the system administrator noticed an alert was logged when the external router was accessed from the administrator's computer to update the router configuration. What type of an alert is this?

  A. False positive

  B. False negative

  C. True positve

  D. True negative

  Correct Answer: A

• Question 152:

  Which of the following parameters enables NMAP's operating system detection feature?

  A. NMAP -sV

  B. NMAP -oS

  C. NMAP -sR

  D. NMAP -O

  Correct Answer: D

• Question 153:

  Bluetooth uses which digital modulation technique to exchange information between paired devices?

  A. PSK (phase-shift keying)

  B. FSK (frequency-shift keying)

  C. ASK (amplitude-shift keying)

  D. QAM (quadrature amplitude modulation)

  Correct Answer: A

• Question 154:

  A security consultant decides to use multiple layers of anti-virus defense, such as end user desktop anti- virus and E-mail gateway. This approach can be used to mitigate which kind of attack?

  A. Forensic attack

  B. ARP spoofing attack

  C. Social engineering attack

  D. Scanning attack

  Correct Answer: C

• Question 155:

  A security policy will be more accepted by employees if it is consistent and has the support of

  A. coworkers.

  B. executive management.

  C. the security officer.

  D. a supervisor.

  Correct Answer: B

• Question 156:

  There is a WEP encrypted wireless access point (AP) with no clients connected. In order to crack the WEP key, a fake authentication needs to be performed. What information is needed when performing fake authentication to an AP? (Choose two.)

  A. The IP address of the AP

  B. The MAC address of the AP

  C. The SSID of the wireless network

  D. A failed authentication packet

  Correct Answer: BC

• Question 157:

  What type of OS fingerprinting technique sends specially crafted packets to the remote OS and analyzes the received response?

  A. Passive

  B. Reflective

  C. Active

  D. Distributive

  Correct Answer: C

• Question 158:

  A network security administrator is worried about potential man-in-the-middle attacks when users access a corporate web site from their workstations. Which of the following is the best remediation against this type of attack?

  A. Implementing server-side PKI certificates for all connections

  B. Mandating only client-side PKI certificates for all connections

  C. Requiring client and server PKI certificates for all connections

  D. Requiring strong authentication for all DNS queries

  Correct Answer: C

• Question 159:

  Which command line switch would be used in NMAP to perform operating system detection?

  A. -OS

  B. -sO

  C. -sP

  D. -O

  Correct Answer: D

• Question 160:

  What statement is true regarding LM hashes?

  A. LM hashes consist in 48 hexadecimal characters.

  B. LM hashes are based on AES128 cryptographic standard.

  C. Uppercase characters in the password are converted to lowercase.

  D. LM hashes are not generated when the password length exceeds 15 characters.

  Correct Answer: D