EC-COUNCIL EC-COUNCIL Certifications 312-50V7 Questions & Answers

• Question 241:

  What is the broadcast address for the subnet 190.86.168.0/22?

  A. 190.86.168.255

  B. 190.86.255.255

  C. 190.86.171.255

  D. 190.86.169.255

  Correct Answer: C

• Question 242:

  Which of the following are valid types of rootkits? (Choose three.)

  A. Hypervisor level

  B. Network level

  C. Kernel level

  D. Application level

  E. Physical level

  F. Data access level

  Correct Answer: ACD

• Question 243:

  John the Ripper is a technical assessment tool used to test the weakness of which of the following?

  A. Usernames

  B. File permissions

  C. Firewall rulesets

  D. Passwords

  Correct Answer: D

• Question 244:

  A company has made the decision to host their own email and basic web services. The administrator needs to set up the external firewall to limit what protocols should be allowed to get to the public part of the company's network. Which ports should the administrator open? (Choose three.)

  A. Port 22

  B. Port 23

  C. Port 25

  D. Port 53

  E. Port 80

  F. Port 139

  G. Port 445

  Correct Answer: CDE

• Question 245:

  Which type of scan measures a person's external features through a digital video camera?

  A. Iris scan

  B. Retinal scan

  C. Facial recognition scan

  D. Signature kinetics scan

  Correct Answer: C

• Question 246:

  In order to show improvement of security over time, what must be developed?

  A. Reports

  B. Testing tools

  C. Metrics

  D. Taxonomy of vulnerabilities

  Correct Answer: C

• Question 247:

  In the software security development life cyle process, threat modeling occurs in which phase?

  A. Design

  B. Requirements

  C. Verification

  D. Implementation

  Correct Answer: A

• Question 248:

  When utilizing technical assessment methods to assess the security posture of a network, which of the following techniques would be most effective in determining whether end-user security training would be beneficial?

  A. Vulnerability scanning

  B. Social engineering

  C. Application security testing

  D. Network sniffing

  Correct Answer: B

• Question 249:

  Which vital role does the U.S. Computer Security Incident Response Team (CSIRT) provide?

  A. Incident response services to any user, company, government agency, or organization in partnership with the Department of Homeland Security

  B. Maintenance of the nation's Internet infrastructure, builds out new Internet infrastructure, and decommissions old Internet infrastructure

  C. Registration of critical penetration testing for the Department of Homeland Security and public and private sectors

  D. Measurement of key vulnerability assessments on behalf of the Department of Defense (DOD) and State Department, as well as private sectors

  Correct Answer: A

• Question 250:

  A covert channel is a channel that

  A. transfers information over, within a computer system, or network that is outside of the security policy.

  B. transfers information over, within a computer system, or network that is within the security policy.

  C. transfers information via a communication path within a computer system, or network for transfer of data.

  D. transfers information over, within a computer system, or network that is encrypted.

  Correct Answer: A