EC-COUNCIL 312-50V7 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V7 Online Questions & Answers

• Question 291:

  Why attackers use proxy servers?

  A. To ensure the exploits used in the attacks always flip reverse vectors
  B. Faster bandwidth performance and increase in attack speed
  C. Interrupt the remote victim's network traffic and reroute the packets to attackers machine
  D. To hide the source IP address so that an attacker can hack without any legal corollary
  D. To hide the source IP address so that an attacker can hack without any legal corollary

• Question 292:

  A recently hired network security associate at a local bank was given the responsibility to perform daily scans of the internal network to look for unauthorized devices. The employee decides to write a script that will scan the network for unauthorized devices every morning at 5:00 am.

  Which of the following programming languages would most likely be used?

  A. PHP
  B. C#
  C. Python
  D. ASP.NET
  C. Python

• Question 293:

  An attacker has successfully compromised a remote computer. Which of the following comes as one of the last steps that should be taken to ensure that the compromise cannot be traced back to the source of the problem?

  A. Install patches
  B. Setup a backdoor
  C. Install a zombie for DDOS
  D. Cover your tracks
  D. Cover your tracks

• Question 294:

  When creating a security program, which approach would be used if senior management is supporting and enforcing the security policy?

  A. A bottom-up approach
  B. A top-down approach
  C. A senior creation approach
  D. An IT assurance approach
  B. A top-down approach

• Question 295:

  Which NMAP command combination would let a tester scan every TCP port from a class C network that is blocking ICMP with fingerprinting and service detection?

  A. NMAP -PN -A -O -sS 192.168.2.0/24
  B. NMAP -P0 -A -O -p1-65535 192.168.0/24
  C. NMAP -P0 -A -sT -p0-65535 192.168.0/16
  D. NMAP -PN -O -sS -p 1-1024 192.168.0/8
  B. NMAP -P0 -A -O -p1-65535 192.168.0/24

• Question 296:

  Which of the following settings enables Nessus to detect when it is sending too many packets and the network pipe is approaching capacity?

  A. Netstat WMI Scan
  B. Silent Dependencies
  C. Consider unscanned ports as closed
  D. Reduce parallel connections on congestion
  D. Reduce parallel connections on congestion

• Question 297:

  Which system consists of a publicly available set of databases that contain domain name registration contact information?

  A. WHOIS
  B. IANA
  C. CAPTCHA
  D. IETF
  A. WHOIS

• Question 298:

  The following is part of a log file taken from the machine on the network with the IP address of 192.168.1.106:

  Time:Mar 13 17:30:15 Port:20 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:17 Port:21 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:19 Port:22 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:21 Port:23 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:22 Port:25 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:23 Port:80 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP Time:Mar 13 17:30:30 Port:443 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP

  What type of activity has been logged?

  A. Port scan targeting 192.168.1.103
  B. Teardrop attack targeting 192.168.1.106
  C. Denial of service attack targeting 192.168.1.103
  D. Port scan targeting 192.168.1.106
  D. Port scan targeting 192.168.1.106

• Question 299:

  Jayden is a network administrator for her company. Jayden wants to prevent MAC spoofing on all the Cisco switches in the network. How can she accomplish this?

  A. Jayden can use the commanD. ip binding set.
  B. Jayden can use the commanD. no ip spoofing.
  C. She should use the commanD. no dhcp spoofing.
  D. She can use the commanD. ip dhcp snooping binding.
  D. She can use the commanD. ip dhcp snooping binding.

• Question 300:

  Which NMAP feature can a tester implement or adjust while scanning for open ports to avoid detection by the network's IDS?

  A. Timing options to slow the speed that the port scan is conducted
  B. Fingerprinting to identify which operating systems are running on the network
  C. ICMP ping sweep to determine which hosts on the network are not available
  D. Traceroute to control the path of the packets sent during the scan
  A. Timing options to slow the speed that the port scan is conducted