EC-COUNCIL EC-COUNCIL Certifications 312-50V7 Questions & Answers

• Question 161:

  What is a successful method for protecting a router from potential smurf attacks?

  A. Placing the router in broadcast mode

  B. Enabling port forwarding on the router

  C. Installing the router outside of the network's firewall

  D. Disabling the router from accepting broadcast ping messages

  Correct Answer: D

• Question 162:

  Which of the following tools will scan a network to perform vulnerability checks and compliance auditing?

  A. NMAP

  B. Metasploit

  C. Nessus

  D. BeEF

  Correct Answer: C

• Question 163:

  The use of technologies like IPSec can help guarantee the followinG. authenticity, integrity, confidentiality and

  A. non-repudiation.

  B. operability.

  C. security.

  D. usability.

  Correct Answer: A

• Question 164:

  A security administrator notices that the log file of the company`s webserver contains suspicious entries:

  

  Based on source code analysis, the analyst concludes that the login.php script is vulnerable to

  A. command injection.

  B. SQL injection.

  C. directory traversal.

  D. LDAP injection.

  Correct Answer: B

• Question 165:

  Which of the following is a detective control?

  A. Smart card authentication

  B. Security policy

  C. Audit trail

  D. Continuity of operations plan

  Correct Answer: C

• Question 166:

  A penetration tester is attempting to scan an internal corporate network from the internet without alerting the border sensor. Which is the most efficient technique should the tester consider using?

  A. Spoofing an IP address

  B. Tunneling scan over SSH

  C. Tunneling over high port numbers

  D. Scanning using fragmented IP packets

  Correct Answer: B

• Question 167:

  A circuit level gateway works at which of the following layers of the OSI Model?

  A. Layer 5 - Application

  B. Layer 4 TCP

  C. Layer 3 Internet protocol

  D. Layer 2 Data link

  Correct Answer: B

• Question 168:

  Which of the following lists are valid data-gathering activities associated with a risk assessment?

  A. Threat identification, vulnerability identification, control analysis

  B. Threat identification, response identification, mitigation identification

  C. Attack profile, defense profile, loss profile

  D. System profile, vulnerability identification, security determination

  Correct Answer: A

• Question 169:

  What is the purpose of conducting security assessments on network resources?

  A. Documentation

  B. Validation

  C. Implementation

  D. Management

  Correct Answer: B

• Question 170:

  A penetration tester was hired to perform a penetration test for a bank. The tester began searching for IP ranges owned by the bank, performing lookups on the bank's DNS servers, reading news articles online about the bank, watching what times the bank employees come into work and leave from work, searching the bank's job postings (paying special attention to IT related jobs), and visiting the local dumpster for the bank's corporate office. What phase of the penetration test is the tester currently in?

  A. Information reporting

  B. Vulnerability assessment

  C. Active information gathering

  D. Passive information gathering

  Correct Answer: D