EC-COUNCIL Certified Ethical Hacker 312-50V7 Questions & Answers

• Question 11:

  A person approaches a network administrator and wants advice on how to send encrypted email from home. The end user does not want to have to pay for any license fees or manage server services. Which of the following is the most secure encryption protocol that the network administrator should recommend?

  A. IP Security (IPSEC)

  B. Multipurpose Internet Mail Extensions (MIME)

  C. Pretty Good Privacy (PGP)

  D. Hyper Text Transfer Protocol with Secure Socket Layer (HTTPS)

  Correct Answer: C

• Question 12:

  At a Windows Server command prompt, which command could be used to list the running services?

  A. Sc query type= running

  B. Sc query \\servername

  C. Sc query

  D. Sc config

  Correct Answer: C

• Question 13:

  Which of the following is optimized for confidential communications, such as bidirectional voice and video?

  A. RC4

  B. RC5

  C. MD4

  D. MD5

  Correct Answer: A

• Question 14:

  The use of alert thresholding in an IDS can reduce the volume of repeated alerts, but introduces which of the following vulnerabilities?

  A. An attacker, working slowly enough, can evade detection by the IDS.

  B. Network packets are dropped if the volume exceeds the threshold.

  C. Thresholding interferes with the IDS' ability to reassemble fragmented packets.

  D. The IDS will not distinguish among packets originating from different sources.

  Correct Answer: A

• Question 15:

  A hacker is attempting to see which IP addresses are currently active on a network. Which NMAP switch would the hacker use?

  A. -sO

  B. -sP

  C. -sS

  D. -sU

  Correct Answer: B

• Question 16:

  A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?

  A. Issue the pivot exploit and set the meterpreter.

  B. Reconfigure the network settings in the meterpreter.

  C. Set the payload to propagate through the meterpreter.

  D. Create a route statement in the meterpreter.

  Correct Answer: D

• Question 17:

  A company has hired a security administrator to maintain and administer Linux and Windows-based systems. Written in the nightly report file is the followinG.

  Firewall log files are at the expected value of 4 MB. The current time is 12am. Exactly two hours later the size has decreased considerably. Another hour goes by

  and the log files have shrunk in size again.

  Which of the following actions should the security administrator take?

  A. Log the event as suspicious activity and report this behavior to the incident response team immediately.

  B. Log the event as suspicious activity, call a manager, and report this as soon as possible.

  C. Run an anti-virus scan because it is likely the system is infected by malware.

  D. Log the event as suspicious activity, continue to investigate, and act according to the site's security policy.

  Correct Answer: D

• Question 18:

  A consultant is hired to do physical penetration testing at a large financial company. In the first day of his assessment, the consultant goes to the company`s building dressed like an electrician and waits in the lobby for an employee to pass through the main access gate, then the consultant follows the employee behind to get into the restricted area. Which type of attack did the consultant perform?

  A. Man trap

  B. Tailgating

  C. Shoulder surfing

  D. Social engineering

  Correct Answer: B

• Question 19:

  Which security control role does encryption meet?

  A. Preventative

  B. Detective

  C. Offensive

  D. Defensive

  Correct Answer: A

• Question 20:

  A hacker is attempting to see which ports have been left open on a network. Which NMAP switch would the hacker use?

  A. -sO

  B. -sP

  C. -sS

  D. -sU

  Correct Answer: A