EC-COUNCIL 312-50V7 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V7 Online Questions & Answers

• Question 481:

  Paul has just finished setting up his wireless network. He has enabled numerous security features such as changing the default SSID, enabling WPA encryption, and enabling MAC filtering on his wireless router. Paul notices that when he uses his wireless connection, the speed is sometimes 54 Mbps and sometimes it is only 24Mbps or less. Paul connects to his wireless router's management utility and notices that a machine with an unfamiliar name is connected through his wireless connection. Paul checks the router's logs and notices that the unfamiliar machine has the same MAC address as his laptop. What is Paul seeing here?

  A. MAC spoofing
  B. Macof
  C. ARP spoofing
  D. DNS spoofing
  A. MAC spoofing

• Question 482:

  What are the three types of authentication?

  A. Something you: know, remember, prove
  B. Something you: have, know, are
  C. Something you: show, prove, are
  D. Something you: show, have, prove
  B. Something you: have, know, are

• Question 483:

  Neil is a network administrator working in Istanbul. Neil wants to setup a protocol analyzer on his network that will receive a copy of every packet that passes through the main office switch. What type of port will Neil need to setup in order to accomplish this?

  A. Neil will have to configure a Bridged port that will copy all packets to the protocol analyzer.
  B. Neil will need to setup SPAN port that will copy all network traffic to the protocol analyzer.
  C. He will have to setup an Ether channel port to get a copy of all network traffic to the analyzer.
  D. He should setup a MODS port which will copy all network traffic.
  B. Neil will need to setup SPAN port that will copy all network traffic to the protocol analyzer.

• Question 484:

  Lori is a Certified Ethical Hacker as well as a Certified Hacking Forensics Investigator working as an IT security consultant. Lori has been hired on by Kiley Innovators, a large marketing firm that recently underwent a string of thefts and corporate espionage incidents. Lori is told that a rival marketing company came out with an exact duplicate product right before Kiley Innovators was about to release it. The executive team believes that an employee is leaking information to the rival company. Lori questions all employees, reviews server logs, and firewall logs; after which she finds nothing. Lori is then given permission to search through the corporate email system. She searches by email being sent to and sent from the rival marketing company.

  She finds one employee that appears to be sending very large email to this other marketing company, even though they should have no reason to be communicating with them. Lori tracks down the actual emails sent and upon opening them, only finds picture files attached to them. These files seem perfectly harmless, usually containing some kind of joke. Lori decides to use some special software to further examine the pictures and finds that each one had hidden text that was stored in each picture.

  What technique was used by the Kiley Innovators employee to send information to the rival marketing company?

  A. The Kiley Innovators employee used cryptography to hide the information in the emails sent
  B. The method used by the employee to hide the information was logical watermarking
  C. The employee used steganography to hide information in the picture attachments
  D. By using the pictures to hide information, the employee utilized picture fuzzing
  C. The employee used steganography to hide information in the picture attachments

• Question 485:

  A computer technician is using a new version of a word processing software package when it is discovered that a special sequence of characters causes the entire computer to crash. The technician researches the bug and discovers that no one else experienced the problem. What is the appropriate next step?

  A. Ignore the problem completely and let someone else deal with it.
  B. Create a document that will crash the computer when opened and send it to friends.
  C. Find an underground bulletin board and attempt to sell the bug to the highest bidder.
  D. Notify the vendor of the bug and do not disclose it until the vendor gets a chance to issue a fix.
  D. Notify the vendor of the bug and do not disclose it until the vendor gets a chance to issue a fix.

• Question 486:

  After gaining access to the password hashes used to protect access to a web based application, knowledge of which cryptographic algorithms would be useful to gain access to the application?

  A. SHA1
  B. Diffie-Helman
  C. RSA
  D. AES
  A. SHA1

• Question 487:

  To reduce the attack surface of a system, administrators should perform which of the following processes to remove unnecessary software, services, and insecure configuration settings?

  A. Harvesting
  B. Windowing
  C. Hardening
  D. Stealthing
  C. Hardening

• Question 488:

  Which of the following is a common Service Oriented Architecture (SOA) vulnerability?

  A. Cross-site scripting
  B. SQL injection
  C. VPath injection
  D. XML denial of service issues
  D. XML denial of service issues

• Question 489:

  When writing shellcodes, you must avoid ____________ because these will end the string.

  

  A. Root bytes
  B. Null bytes
  C. Char bytes
  D. Unicode bytes
  B. Null bytes

• Question 490:

  Trojan horse attacks pose one of the most serious threats to computer security. The image below shows different ways a Trojan can get into a system. Which are the easiest and most convincing ways to infect a computer?

  

  A. IRC (Internet Relay Chat)
  B. Legitimate "shrink-wrapped" software packaged by a disgruntled employee
  C. NetBIOS (File Sharing)
  D. Downloading files, games and screensavers from Internet sites
  B. Legitimate "shrink-wrapped" software packaged by a disgruntled employee