EC-COUNCIL 312-50V7 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V7 Online Questions & Answers

• Question 371:

  Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and that a certificate is still valid for specific operations?

  A. Certificate issuance
  B. Certificate validation
  C. Certificate cryptography
  D. Certificate revocation
  B. Certificate validation

• Question 372:

  How do you defend against Privilege Escalation?

  A. Use encryption to protect sensitive data
  B. Restrict the interactive logon privileges
  C. Run services as unprivileged accounts
  D. Allow security settings of IE to zero or Low
  E. Run users and applications on the least privileges
  A. Use encryption to protect sensitive data
  B. Restrict the interactive logon privileges
  C. Run services as unprivileged accounts
  E. Run users and applications on the least privileges

• Question 373:

  The Open Web Application Security Project (OWASP) testing methodology addresses the need to secure web applications by providing which one of the following services?

  A. An extensible security framework named COBIT
  B. A list of flaws and how to fix them
  C. Web application patches
  D. A security certification for hardened web applications
  B. A list of flaws and how to fix them

• Question 374:

  You are the Security Administrator of Xtrinity, Inc. You write security policies and conduct assessments to protect the company's network. During one of your periodic checks to see how well policy is being observed by the employees, you discover an employee has attached cell phone 3G modem to his telephone line and workstation. He has used this cell phone 3G modem to dial in to his workstation, thereby bypassing your firewall. A security breach has occurred as a direct result of this activity. The employee explains that he used the modem because he had to download software for a department project. How would you resolve this situation?

  A. Reconfigure the firewall
  B. Enforce the corporate security policy
  C. Install a network-based IDS
  D. Conduct a needs analysis
  B. Enforce the corporate security policy

• Question 375:

  Steve scans the network for SNMP enabled devices. Which port number Steve should scan?

  A. 150
  B. 161
  C. 169
  D. 69
  B. 161

• Question 376:

  Stephanie works as a records clerk in a large office building in downtown Chicago. On Monday, she went to a mandatory security awareness class (Security5) put on by her company's IT department. During the class, the IT department informed all employees that everyone's Internet activity was thenceforth going to be monitored.

  Stephanie is worried that her Internet activity might give her supervisor reason to write her up, or worse get her fired. Stephanie's daily work duties only consume about four hours of her time, so she usually spends the rest of the day surfing the web. Stephanie really enjoys surfing the Internet but definitely does not want to get fired for it.

  What should Stephanie use so that she does not get in trouble for surfing the Internet?

  A. Stealth IE
  B. Stealth Anonymizer
  C. Stealth Firefox
  D. Cookie Disabler
  B. Stealth Anonymizer

• Question 377:

  Here is the ASCII Sheet.

  You want to guess the DBO username juggyboy (8 characters) using Blind SQL Injection technique.

  What is the correct syntax?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 378:

  Blane is a security analyst for a law firm. One of the lawyers needs to send out an email to a client but he wants to know if the email is forwarded on to any other recipients. The client is explicitly asked not to re-send the email since that would be a violation of the lawyer's and client's agreement for this particular case. What can Blane use to accomplish this?

  A. He can use a split-DNS service to ensure the email is not forwarded on.
  B. A service such as HTTrack would accomplish this.
  C. Blane could use MetaGoofil tracking tool.
  D. Blane can use a service such as ReadNotify tracking tool.
  D. Blane can use a service such as ReadNotify tracking tool.

• Question 379:

  Which of the following is used to indicate a single-line comment in structured query language (SQL)?

  A. -
  B. ||
  C. %%
  D. ''
  A. -

• Question 380:

  This tool is widely used for ARP Poisoning attack. Name the tool.

  

  A. Cain and Able
  B. Beat Infector
  C. Poison Ivy
  D. Webarp Infector
  A. Cain and Able