EC-COUNCIL EC-COUNCIL Certifications 312-50V7 Questions & Answers

• Question 221:

  Which of the following statements are true regarding N-tier architecture? (Choose two.)

  A. Each layer must be able to exist on a physically independent system.

  B. The N-tier architecture must have at least one logical layer.

  C. Each layer should exchange information only with the layers above and below it.

  D. When a layer is changed or updated, the other layers must also be recompiled or modified.

  Correct Answer: AC

• Question 222:

  Some passwords are stored using specialized encryption algorithms known as hashes. Why is this an appropriate method?

  A. It is impossible to crack hashed user passwords unless the key used to encrypt them is obtained.

  B. If a user forgets the password, it can be easily retrieved using the hash key stored by administrators.

  C. Hashing is faster compared to more traditional encryption algorithms.

  D. Passwords stored using hashes are non-reversible, making finding the password much more difficult.

  Correct Answer: D

• Question 223:

  Which of the following types of firewall inspects only header information in network traffic?

  A. Packet filter

  B. Stateful inspection

  C. Circuit-level gateway

  D. Application-level gateway

  Correct Answer: A

• Question 224:

  An attacker sniffs encrypted traffic from the network and is subsequently able to decrypt it. The attacker can now use which cryptanalytic technique to attempt to discover the encryption key?

  A. Birthday attack

  B. Plaintext attack

  C. Meet in the middle attack

  D. Chosen ciphertext attack

  Correct Answer: D

• Question 225:

  Low humidity in a data center can cause which of the following problems?

  A. Heat

  B. Corrosion

  C. Static electricity

  D. Airborne contamination

  Correct Answer: C

• Question 226:

  Which of the following describes a component of Public Key Infrastructure (PKI) where a copy of a private key is stored to provide third-party access and to facilitate recovery operations?

  A. Key registry

  B. Recovery agent

  C. Directory

  D. Key escrow

  Correct Answer: D

• Question 227:

  Which tool would be used to collect wireless packet data?

  A. NetStumbler

  B. John the Ripper

  C. Nessus

  D. Netcat

  Correct Answer: A

• Question 228:

  What is the main reason the use of a stored biometric is vulnerable to an attack?

  A. The digital representation of the biometric might not be unique, even if the physical characteristic is unique.

  B. Authentication using a stored biometric compares a copy to a copy instead of the original to a copy.

  C. A stored biometric is no longer "something you are" and instead becomes "something you have".

  D. A stored biometric can be stolen and used by an attacker to impersonate the individual identified by the biometric.

  Correct Answer: D

• Question 229:

  Which tool is used to automate SQL injections and exploit a database by forcing a given web application to connect to another database controlled by a hacker?

  A. DataThief

  B. NetCat

  C. Cain and Abel

  D. SQLInjector

  Correct Answer: D

• Question 230:

  A security analyst is performing an audit on the network to determine if there are any deviations from the security policies in place. The analyst discovers that a user from the IT department had a dial-out modem installed. Which security policy must the security analyst check to see if dial-out modems are allowed?

  A. Firewall-management policy

  B. Acceptable-use policy

  C. Remote-access policy

  D. Permissive policy

  Correct Answer: C