EC-COUNCIL 312-50V7 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V7 Online Questions & Answers

• Question 281:

  You are performing a port scan with nmap. You are in hurry and conducting the scans at the fastest possible speed. However, you don't want to sacrifice reliability for speed. If stealth is not an issue, what type of scan should you run to get very reliable results?

  A. Stealth scan
  B. Connect scan
  C. Fragmented packet scan
  D. XMAS scan
  B. Connect scan

• Question 282:

  Advanced encryption standard is an algorithm used for which of the following?

  A. Data integrity
  B. Key discovery
  C. Bulk data encryption
  D. Key recovery
  C. Bulk data encryption

• Question 283:

  During a penetration test, a tester finds a target that is running MS SQL 2000 with default credentials. The tester assumes that the service is running with Local System account. How can this weakness be exploited to access the system?

  A. Using the Metasploit psexec module setting the SA / Admin credential
  B. Invoking the stored procedure xp_shell to spawn a Windows command shell
  C. Invoking the stored procedure cmd_shell to spawn a Windows command shell
  D. Invoking the stored procedure xp_cmdshell to spawn a Windows command shell
  D. Invoking the stored procedure xp_cmdshell to spawn a Windows command shell

• Question 284:

  File extensions provide information regarding the underlying server technology. Attackers can use this information to search vulnerabilities and launch attacks. How would you disable file extensions in Apache servers?

  A. Use disable-eXchange
  B. Use mod_negotiation
  C. Use Stop_Files
  D. Use Lib_exchanges
  B. Use mod_negotiation

• Question 285:

  A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System (OS) version installed. Considering the NMAP result below, which of the following is likely to be installed on the target machine by the OS?

  Starting NMAP 5.21 at 2011-03-15 11:06 NMAP scan report for 172.16.40.65 Host is up (1.00s latency). Not shown: 993 closed ports PORT STATE SERVICE 21/tcp open ftp 23/tcp open telnet 80/tcp open http 139/tcp open netbios-ssn 515/tcp open 631/tcp open ipp 9100/tcp open MAC Address: 00:00:48:0D:EE:89

  A. The host is likely a Windows machine.
  B. The host is likely a Linux machine.
  C. The host is likely a router.
  D. The host is likely a printer.
  D. The host is likely a printer.

• Question 286:

  Attackers footprint target Websites using Google Hacking techniques. Google hacking is a term that refers to the art of creating complex search engine queries. It detects websites that are vulnerable to numerous exploits and vulnerabilities. Google operators are used to locate specific strings of text within the search results.

  The configuration file contains both a username and a password for an SQL database. Most sites with forums run a PHP message base. This file gives you the keys to that forum, including FULL ADMIN access to the database. WordPress uses config.php that stores the database Username and Password. Which of the below Google search string brings up sites with "config.php" files?

  A. Search:index config/php
  B. Wordpress:index config.php
  C. intitle:index.of config.php
  D. Config.php:index list
  C. intitle:index.of config.php

• Question 287:

  Low humidity in a data center can cause which of the following problems?

  A. Heat
  B. Corrosion
  C. Static electricity
  D. Airborne contamination
  C. Static electricity

• Question 288:

  Which of the following is considered an acceptable option when managing a risk?

  A. Reject the risk.
  B. Deny the risk.
  C. Mitigate the risk.
  D. Initiate the risk.
  C. Mitigate the risk.

• Question 289:

  A technician is resolving an issue where a computer is unable to connect to the Internet using a wireless access point. The computer is able to transfer files locally to other machines, but cannot successfully reach the Internet. When the technician examines the IP address and default gateway they are both on the 192.168.1.0/24. Which of the following has occurred?

  A. The gateway is not routing to a public IP address.
  B. The computer is using an invalid IP address.
  C. The gateway and the computer are not on the same network.
  D. The computer is not using a private IP address.
  A. The gateway is not routing to a public IP address.

• Question 290:

  NetBIOS over TCP/IP allows files and/or printers to be shared over the network. You are trying to intercept the traffic from a victim machine to a corporate network printer. You are attempting to hijack the printer network connection from your laptop by sniffing the wire. Which port does SMB over TCP/IP use?

  A. 443
  B. 139
  C. 179
  D. 445
  D. 445