EC-COUNCIL 312-50V7 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V7 Online Questions & Answers

• Question 221:

  Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results? TCP port 21 no response TCP port 22 no response TCP port 23 Time-to-live exceeded

  A. The firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host.
  B. The lack of response from ports 21 and 22 indicate that those services are not running on the destination server.
  C. The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall.
  D. The scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error.
  C. The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall.

• Question 222:

  What is the broadcast address for the subnet 190.86.168.0/22?

  A. 190.86.168.255
  B. 190.86.255.255
  C. 190.86.171.255
  D. 190.86.169.255
  C. 190.86.171.255

• Question 223:

  John is using a special tool on his Linux platform that has a database containing signatures to be able to detect hundreds of vulnerabilities in UNIX, Windows, and commonly used web CGI/ASPX scripts. Moreover, the database detects DDoS zombies and Trojans as well. What would be the name of this tool?

  A. hping2
  B. nessus
  C. nmap
  D. make
  B. nessus

• Question 224:

  Leesa is the senior security analyst for a publicly traded company. The IT department recently rolled out an intranet for company use only with information ranging from training, to holiday schedules, to human resources data. Leesa wants to make sure the site is not accessible from outside and she also wants to ensure the site is Sarbanes-Oxley (SOX) compliant. Leesa goes to a public library as she wants to do some Google searching to verify whether the company's intranet is accessible from outside and has been indexed by Google. Leesa wants to search for a website title of "intranet" with part of the URL containing the word "intranet" and the words "human resources" somewhere in the webpage.

  What Google search will accomplish this?

  A. related:intranet allinurl:intranet:"human resources"
  B. cache:"human resources" inurl:intranet(SharePoint)
  C. intitle:intranet inurl:intranet+intext:"human resources"
  D. site:"human resources"+intext:intranet intitle:intranet
  C. intitle:intranet inurl:intranet+intext:"human resources"

• Question 225:

  TCP SYN Flood attack uses the three-way handshake mechanism.

  1.

  An attacker at system A sends a SYN packet to victim at system B.

  2.

  System B sends a SYN/ACK packet to victim A.

  3.

  As a normal three-way handshake mechanism system A should send an ACK packet to system B, however, system A does not send an ACK packet to system B. In this case client B is waiting for an ACK packet from client A. This status of client B is called _________________

  A. "half-closed"
  B. "half open"
  C. "full-open"
  D. "xmas-open"
  B. "half open"

• Question 226:

  "Testing the network using the same methodologies and tools employed by attackers" Identify the correct terminology that defines the above statement.

  A. Vulnerability Scanning
  B. Penetration Testing
  C. Security Policy Implementation
  D. Designing Network Security
  B. Penetration Testing

• Question 227:

  Which security strategy requires using several, varying methods to protect IT systems against attacks?

  A. Defense in depth
  B. Three-way handshake
  C. Covert channels
  D. Exponential backoff algorithm
  A. Defense in depth

• Question 228:

  While conducting a penetration test, the tester determines that there is a firewall between the tester's machine and the target machine. The firewall is only monitoring TCP handshaking of packets at the session layer of the OSI model. Which type of firewall is the tester trying to traverse?

  A. Packet filtering firewall
  B. Application-level firewall
  C. Circuit-level gateway firewall
  D. Stateful multilayer inspection firewall
  C. Circuit-level gateway firewall

• Question 229:

  What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?

  A. Blue Book
  B. ISO 26029
  C. Common Criteria
  D. The Wassenaar Agreement
  C. Common Criteria

• Question 230:

  On a Linux device, which of the following commands will start the Nessus client in the background so that the Nessus server can be configured?

  A. nessus +
  B. nessus *s
  C. nessus and
  D. nessus -d
  C. nessus and