EC-COUNCIL EC-COUNCIL Certifications 312-50V7 Questions & Answers

• Question 61:

  From the two screenshots below, which of the following is occurring?

  A. 10.0.0.253 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against 10.0.0.2.

  B. 10.0.0.253 is performing an IP scan against 10.0.0.2, 10.0.0.252 is performing a port scan against 10.0.0.2.

  C. 10.0.0.2 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against 10.0.0.2.

  D. 10.0.0.252 is performing an IP scan against 10.0.0.2, 10.0.0.252 is performing a port scan against 10.0.0.2.

  Correct Answer: A

• Question 62:

  Which of the following can the administrator do to verify that a tape backup can be recovered in its entirety?

  A. Restore a random file.

  B. Perform a full restore.

  C. Read the first 512 bytes of the tape.

  D. Read the last 512 bytes of the tape.

  Correct Answer: B

• Question 63:

  Which of the following is a component of a risk assessment?

  A. Physical security

  B. Administrative safeguards

  C. DMZ

  D. Logical interface

  Correct Answer: B

• Question 64:

  What information should an IT system analysis provide to the risk assessor?

  A. Management buy-in

  B. Threat statement

  C. Security architecture

  D. Impact analysis

  Correct Answer: C

• Question 65:

  Which of the following descriptions is true about a static NAT?

  A. A static NAT uses a many-to-many mapping.

  B. A static NAT uses a one-to-many mapping.

  C. A static NAT uses a many-to-one mapping.

  D. A static NAT uses a one-to-one mapping.

  Correct Answer: D

• Question 66:

  Which United States legislation mandates that the Chief Executive Officer (CEO) and the Chief Financial Officer (CFO) must sign statements verifying the completeness and accuracy of financial reports?

  A. Sarbanes-Oxley Act (SOX)

  B. Gramm-Leach-Bliley Act (GLBA)

  C. Fair and Accurate Credit Transactions Act (FACTA)

  D. Federal Information Security Management Act (FISMA)

  Correct Answer: A

• Question 67:

  Which of the following does proper basic configuration of snort as a network intrusion detection system require?

  A. Limit the packets captured to the snort configuration file.

  B. Capture every packet on the network segment.

  C. Limit the packets captured to a single segment.

  D. Limit the packets captured to the /var/log/snort directory.

  Correct Answer: A

• Question 68:

  When analyzing the IDS logs, the system administrator notices connections from outside of the LAN have been sending packets where the Source IP address and Destination IP address are the same. There have been no alerts sent via email or logged in the IDS. Which type of an alert is this?

  A. False positive

  B. False negative

  C. True positive

  D. True negative

  Correct Answer: B

• Question 69:

  An organization hires a tester to do a wireless penetration test. Previous reports indicate that the last test did not contain management or control packets in the submitted traces. Which of the following is the most likely reason for lack of management or control packets?

  A. The wireless card was not turned on.

  B. The wrong network card drivers were in use by Wireshark.

  C. On Linux and Mac OS X, only 802.11 headers are received in promiscuous mode.

  D. Certain operating systems and adapters do not collect the management or control packets.

  Correct Answer: D

• Question 70:

  Which of the following techniques will identify if computer files have been changed?

  A. Network sniffing

  B. Permission sets

  C. Integrity checking hashes

  D. Firewall alerts

  Correct Answer: C