EC-COUNCIL 312-50V7 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V7 Online Questions & Answers

• Question 461:

  Which United States legislation mandates that the Chief Executive Officer (CEO) and the Chief Financial Officer (CFO) must sign statements verifying the completeness and accuracy of financial reports?

  A. Sarbanes-Oxley Act (SOX)
  B. Gramm-Leach-Bliley Act (GLBA)
  C. Fair and Accurate Credit Transactions Act (FACTA)
  D. Federal Information Security Management Act (FISMA)
  A. Sarbanes-Oxley Act (SOX)

• Question 462:

  Jimmy, an attacker, knows that he can take advantage of poorly designed input validation routines to create or alter SQL commands to gain access to private data or execute commands in the database. What technique does Jimmy use to compromise a database?

  A. Jimmy can submit user input that executes an operating system command to compromise a target system
  B. Jimmy can gain control of system to flood the target system with requests, preventing legitimate users from gaining access
  C. Jimmy can utilize an incorrect configuration that leads to access with higher-than expected privilege of the database
  D. Jimmy can utilize this particular database threat that is an SQL injection technique to penetrate a target system
  D. Jimmy can utilize this particular database threat that is an SQL injection technique to penetrate a target system

• Question 463:

  Neil is an IT security consultant working on contract for Davidson Avionics. Neil has been hired to audit the network of Davidson Avionics. He has been given permission to perform any tests necessary. Neil has created a fake company ID badge and uniform. Neil waits by one of the company's entrance doors and follows an employee into the office after they use their valid access card to gain entrance. What type of social engineering attack has Neil employed here?

  A. Neil has used a tailgating social engineering attack to gain access to the offices
  B. He has used a piggybacking technique to gain unauthorized access
  C. This type of social engineering attack is called man trapping
  D. Neil is using the technique of reverse social engineering to gain access to the offices of Davidson Avionics
  A. Neil has used a tailgating social engineering attack to gain access to the offices

• Question 464:

  What type of port scan is shown below?

  

  A. Idle Scan
  B. FIN Scan
  C. XMAS Scan
  D. Windows Scan
  B. FIN Scan

• Question 465:

  Which of the following is a component of a risk assessment?

  A. Physical security
  B. Administrative safeguards
  C. DMZ
  D. Logical interface
  B. Administrative safeguards

• Question 466:

  June, a security analyst, understands that a polymorphic virus has the ability to mutate and can change its known viral signature and hide from signature-based antivirus programs. Can June use an antivirus program in this case and would it be effective against a polymorphic virus?

  A. Yes. June can use an antivirus program since it compares the parity bit of executable files to the database of known check sum counts and it is effective on a polymorphic virus
  B. Yes. June can use an antivirus program since it compares the signatures of executable files to the database of known viral signatures and it is very effective against a polymorphic virus
  C. No. June can't use an antivirus program since it compares the signatures of executable files to the database of known viral signatures and in the case the polymorphic viruses cannot be detected by a signature-based anti-virus program
  D. No. June can't use an antivirus program since it compares the size of executable files to the database of known viral signatures and it is effective on a polymorphic virus
  C. No. June can't use an antivirus program since it compares the signatures of executable files to the database of known viral signatures and in the case the polymorphic viruses cannot be detected by a signature-based anti-virus program

• Question 467:

  Which of the following problems can be solved by using Wireshark?

  A. Tracking version changes of source code
  B. Checking creation dates on all webpages on a server
  C. Resetting the administrator password on multiple systems
  D. Troubleshooting communication resets between two systems
  D. Troubleshooting communication resets between two systems

• Question 468:

  Wayne is the senior security analyst for his company. Wayne is examining some traffic logs on a server and came across some inconsistencies. Wayne finds some IP packets from a computer purporting to be on the internal network. The packets originate from 192.168.12.35 with a TTL of 15. The server replied to this computer and received a response from 192.168.12.35 with a TTL of 21. What can Wayne infer from this traffic log?

  A. The initial traffic from 192.168.12.35 was being spoofed.
  B. The traffic from 192.168.12.25 is from a Linux computer.
  C. The TTL of 21 means that the client computer is on wireless.
  D. The client computer at 192.168.12.35 is a zombie computer.
  A. The initial traffic from 192.168.12.35 was being spoofed.

• Question 469:

  Which of the following defines the role of a root Certificate Authority (CA) in a Public Key Infrastructure (PKI)?

  A. The root CA is the recovery agent used to encrypt data when a user's certificate is lost.
  B. The root CA stores the user's hash value for safekeeping.
  C. The CA is the trusted root that issues certificates.
  D. The root CA is used to encrypt email messages to prevent unintended disclosure of data.
  C. The CA is the trusted root that issues certificates.

• Question 470:

  Which type of access control is used on a router or firewall to limit network activity?

  A. Mandatory
  B. Discretionary
  C. Rule-based
  D. Role-based
  C. Rule-based