EC-COUNCIL 312-50V7 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V7 Online Questions & Answers

• Question 441:

  How does an operating system protect the passwords used for account logins?

  A. The operating system performs a one-way hash of the passwords.
  B. The operating system stores the passwords in a secret file that users cannot find.
  C. The operating system encrypts the passwords, and decrypts them when needed.
  D. The operating system stores all passwords in a protected segment of non-volatile memory.
  A. The operating system performs a one-way hash of the passwords.

• Question 442:

  An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?

  A. Classified
  B. Overt
  C. Encrypted
  D. Covert
  D. Covert

• Question 443:

  Employees in a company are no longer able to access Internet web sites on their computers. The network administrator is able to successfully ping IP address of web servers on the Internet and is able to open web sites by using an IP address in place of the URL. The administrator runs the nslookup command for www.eccouncil.org and receives an error message stating there is no response from the server. What should the administrator do next?

  A. Configure the firewall to allow traffic on TCP ports 53 and UDP port 53.
  B. Configure the firewall to allow traffic on TCP ports 80 and UDP port 443.
  C. Configure the firewall to allow traffic on TCP port 53.
  D. Configure the firewall to allow traffic on TCP port 8080.
  A. Configure the firewall to allow traffic on TCP ports 53 and UDP port 53.

• Question 444:

  What are the limitations of Vulnerability scanners? (Select 2 answers)

  A. There are often better at detecting well-known vulnerabilities than more esoteric ones
  B. The scanning speed of their scanners are extremely high
  C. It is impossible for any, one scanning product to incorporate all known vulnerabilities in a timely manner
  D. The more vulnerabilities detected, the more tests required
  E. They are highly expensive and require per host scan license
  A. There are often better at detecting well-known vulnerabilities than more esoteric ones
  C. It is impossible for any, one scanning product to incorporate all known vulnerabilities in a timely manner

• Question 445:

  While performing data validation of web content, a security technician is required to restrict malicious input. Which of the following processes is an efficient way of restricting malicious input?

  A. Validate web content input for query strings.
  B. Validate web content input with scanning tools.
  C. Validate web content input for type, length, and range.
  D. Validate web content input for extraneous queries.
  C. Validate web content input for type, length, and range.

• Question 446:

  What is the main difference between a "Normal" SQL Injection and a "Blind" SQL Injection vulnerability?

  A. The request to the web server is not visible to the administrator of the vulnerable application.
  B. The attack is called "Blind" because, although the application properly filters user input, it is still vulnerable to code injection.
  C. The successful attack does not show an error message to the administrator of the affected application.
  D. The vulnerable application does not display errors with information about the injection results to the attacker.
  D. The vulnerable application does not display errors with information about the injection results to the attacker.

• Question 447:

  Harold is the senior security analyst for a small state agency in New York. He has no other security professionals that work under him, so he has to do all the security-related tasks for the agency. Coming from a computer hardware background, Harold does not have a lot of experience with security methodologies and technologies, but he was the only one who applied for the position. Harold is currently trying to run a Sniffer on the agency's network to get an idea of what kind of traffic is being passed around, but the program he is using does not seem to be capturing anything. He pours through the Sniffer's manual, but cannot find anything that directly relates to his problem. Harold decides to ask the network administrator if he has any thoughts on the problem. Harold is told that the Sniffer was not working because the agency's network is a switched network, which cannot be sniffed by some programs without some tweaking. What technique could Harold use to sniff his agency's switched network?

  A. ARP spoof the default gateway
  B. Conduct MiTM against the switch
  C. Launch smurf attack against the switch
  D. Flood the switch with ICMP packets
  A. ARP spoof the default gateway

• Question 448:

  Which of the following is a protocol that is prone to a man-in-the-middle (MITM) attack and maps a 32-bit address to a 48-bit address?

  A. ICPM
  B. ARP
  C. RARP
  D. ICMP
  B. ARP

• Question 449:

  In what stage of Virus life does a stealth virus gets activated with the user performing certain actions such as running an infected program?

  A. Design
  B. Elimination
  C. Incorporation
  D. Replication
  E. Launch
  F. Detection
  E. Launch

• Question 450:

  Which type of intrusion detection system can monitor and alert on attacks, but cannot stop them?

  A. Detective
  B. Passive
  C. Intuitive
  D. Reactive
  B. Passive