EC-COUNCIL 312-50V7 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V7 Online Questions & Answers

• Question 491:

  In the software security development life cyle process, threat modeling occurs in which phase?

  A. Design
  B. Requirements
  C. Verification
  D. Implementation
  A. Design

• Question 492:

  Which of the following is NOT part of CEH Scanning Methodology?

  A. Check for Live systems
  B. Check for Open Ports
  C. Banner Grabbing
  D. Prepare Proxies
  E. Social Engineering attacks
  F. Scan for Vulnerabilities
  G. Draw Network Diagrams
  E. Social Engineering attacks

• Question 493:

  What is the command used to create a binary log file using tcpdump?

  A. tcpdump -w ./log
  B. tcpdump -r log
  C. tcpdump -vde logtcpdump -vde ? log
  D. tcpdump -l /var/log/
  A. tcpdump -w ./log

• Question 494:

  Which of the following LM hashes represents a password of less than 8 characters?

  A. 0182BD0BD4444BF836077A718CCDF409
  B. 44EFCE164AB921CQAAD3B435B51404EE
  C. BA810DBA98995F1817306D272A9441BB
  D. CEC52EB9C8E3455DC2265B23734E0DAC
  E. B757BF5C0D87772FAAD3B435B51404EE
  F. E52CAC67419A9A224A3B108F3FA6CB6D
  B. 44EFCE164AB921CQAAD3B435B51404EE
  E. B757BF5C0D87772FAAD3B435B51404EE

• Question 495:

  An NMAP scan of a server shows port 69 is open. What risk could this pose?

  A. Unauthenticated access
  B. Weak SSL version
  C. Cleartext login
  D. Web portal data leak
  A. Unauthenticated access

• Question 496:

  XSS attacks occur on Web pages that do not perform appropriate bounds checking on data entered by users. Characters like < > that mark the beginning/end of a tag should be converted into HTML entities.

  

  What is the correct code when converted to html entities?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 497:

  In Buffer Overflow exploit, which of the following registers gets overwritten with return address of the exploit code?

  A. EEP
  B. ESP
  C. EAP
  D. EIP
  D. EIP

• Question 498:

  Johnny is a member of the hacking group Orpheus1. He is currently working on breaking into the Department of Defense's front end Exchange Server. He was able to get into the server, located in a DMZ, by using an unused service account that had a very weak password that he was able to guess. Johnny wants to crack the administrator password, but does not have a lot of time to crack it. He wants to use a tool that already has the LM hashes computed for all possible permutations of the administrator password.

  What tool would be best used to accomplish this?

  A. SMBCrack
  B. SmurfCrack
  C. PSCrack
  D. RainbowTables
  D. RainbowTables

• Question 499:

  Which of the following types of firewall inspects only header information in network traffic?

  A. Packet filter
  B. Stateful inspection
  C. Circuit-level gateway
  D. Application-level gateway
  A. Packet filter

• Question 500:

  In Trojan terminology, what is required to create the executable file chess.exe as shown below?

  

  A. Mixer
  B. Converter
  C. Wrapper
  D. Zipper
  C. Wrapper