EC-COUNCIL 312-50V7 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V7 Online Questions & Answers

• Question 41:

  Which of the following Exclusive OR transforms bits is NOT correct?

  A. 0 xor 0 = 0
  B. 1 xor 0 = 1
  C. 1 xor 1 = 1
  D. 0 xor 1 = 1
  C. 1 xor 1 = 1

• Question 42:

  Frederickson Security Consultants is currently conducting a security audit on the networks of Hawthorn Enterprises, a contractor for the Department of Defense. Since Hawthorn Enterprises conducts business daily with the federal government, they must abide by very stringent security policies. Frederickson is testing all of Hawthorn's physical and logical security measures including biometrics, passwords, and permissions. The federal government requires that all users must utilize random, non-dictionary passwords that must take at least 30 days to crack. Frederickson has confirmed that all Hawthorn employees use a random password generator for their network passwords. The Frederickson consultants have saved off numerous SAM files from Hawthorn's servers using Pwdump6 and are going to try and crack the network passwords. What method of attack is best suited to crack these passwords in the shortest amount of time?

  A. Brute force attack
  B. Birthday attack
  C. Dictionary attack
  D. Brute service attack
  A. Brute force attack

• Question 43:

  While checking the settings on the internet browser, a technician finds that the proxy server settings have been checked and a computer is trying to use itself as a proxy server. What specific octet within the subnet does the technician see?

  A. 10.10.10.10
  B. 127.0.0.1
  C. 192.168.1.1
  D. 192.168.168.168
  B. 127.0.0.1

• Question 44:

  One advantage of an application-level firewall is the ability to

  A. filter packets at the network level.
  B. filter specific commands, such as http:post.
  C. retain state information for each packet.
  D. monitor tcp handshaking.
  B. filter specific commands, such as http:post.

• Question 45:

  Some passwords are stored using specialized encryption algorithms known as hashes. Why is this an appropriate method?

  A. It is impossible to crack hashed user passwords unless the key used to encrypt them is obtained.
  B. If a user forgets the password, it can be easily retrieved using the hash key stored by administrators.
  C. Hashing is faster compared to more traditional encryption algorithms.
  D. Passwords stored using hashes are non-reversible, making finding the password much more difficult.
  D. Passwords stored using hashes are non-reversible, making finding the password much more difficult.

• Question 46:

  What framework architecture is shown in this exhibit?

  

  A. Core Impact
  B. Metasploit
  C. Immunity Canvas
  D. Nessus
  B. Metasploit

• Question 47:

  Which of the following resources does NMAP need to be used as a basic vulnerability scanner covering several vectors like SMB, HTTP and FTP?

  A. Metasploit scripting engine
  B. Nessus scripting engine
  C. NMAP scripting engine
  D. SAINT scripting engine
  C. NMAP scripting engine

• Question 48:

  What type of session hijacking attack is shown in the exhibit?

  

  A. Session Sniffing Attack
  B. Cross-site scripting Attack
  C. SQL Injection Attack
  D. Token sniffing Attack
  A. Session Sniffing Attack

• Question 49:

  You are programming a buffer overflow exploit and you want to create a NOP sled of 200 bytes in the program exploit.c

  

  What is the hexadecimal value of NOP instruction?

  A. 0x60
  B. 0x80
  C. 0x70
  D. 0x90
  D. 0x90

• Question 50:

  From the two screenshots below, which of the following is occurring?

  A. 10.0.0.253 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against 10.0.0.2.
  B. 10.0.0.253 is performing an IP scan against 10.0.0.2, 10.0.0.252 is performing a port scan against 10.0.0.2.
  C. 10.0.0.2 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against 10.0.0.2.
  D. 10.0.0.252 is performing an IP scan against 10.0.0.2, 10.0.0.252 is performing a port scan against 10.0.0.2.
  A. 10.0.0.253 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against 10.0.0.2.