EC-COUNCIL 312-50V7 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V7 Online Questions & Answers

• Question 61:

  When utilizing technical assessment methods to assess the security posture of a network, which of the following techniques would be most effective in determining whether end-user security training would be beneficial?

  A. Vulnerability scanning
  B. Social engineering
  C. Application security testing
  D. Network sniffing
  B. Social engineering

• Question 62:

  How does a denial-of-service attack work?

  A. A hacker prevents a legitimate user (or group of users) from accessing a service
  B. A hacker uses every character, word, or letter he or she can think of to defeat authentication
  C. A hacker tries to decipher a password by using a system, which subsequently crashes the network
  D. A hacker attempts to imitate a legitimate user by confusing a computer or even another person
  A. A hacker prevents a legitimate user (or group of users) from accessing a service

• Question 63:

  How does traceroute map the route a packet travels from point A to point B?

  A. Uses a TCP timestamp packet that will elicit a time exceeded in transit message
  B. Manipulates the value of the time to live (TTL) within packet to elicit a time exceeded in transit message
  C. Uses a protocol that will be rejected by gateways on its way to the destination
  D. Manipulates the flags within packets to force gateways into generating error messages
  B. Manipulates the value of the time to live (TTL) within packet to elicit a time exceeded in transit message

• Question 64:

  A pentester gains acess to a Windows application server and needs to determine the settings of the built-in Windows firewall. Which command would be used?

  A. Netsh firewall show config
  B. WMIC firewall show config
  C. Net firewall show config
  D. Ipconfig firewall show config
  A. Netsh firewall show config

• Question 65:

  In keeping with the best practices of layered security, where are the best places to place intrusion detection/intrusion prevention systems? (Choose two.)

  A. HID/HIP (Host-based Intrusion Detection/Host-based Intrusion Prevention)
  B. NID/NIP (Node-based Intrusion Detection/Node-based Intrusion Prevention)
  C. NID/NIP (Network-based Intrusion Detection/Network-based Intrusion Prevention)
  D. CID/CIP (Computer-based Intrusion Detection/Computer-based Intrusion Prevention)
  A. HID/HIP (Host-based Intrusion Detection/Host-based Intrusion Prevention)
  C. NID/NIP (Network-based Intrusion Detection/Network-based Intrusion Prevention)

• Question 66:

  What is the primary drawback to using advanced encryption standard (AES) algorithm with a 256 bit key to share sensitive data?

  A. Due to the key size, the time it will take to encrypt and decrypt the message hinders efficient communication.
  B. To get messaging programs to function with this algorithm requires complex configurations.
  C. It has been proven to be a weak cipher; therefore, should not be trusted to protect sensitive data.
  D. It is a symmetric key algorithm, meaning each recipient must receive the key through a different channel than the message.
  D. It is a symmetric key algorithm, meaning each recipient must receive the key through a different channel than the message.

• Question 67:

  What does FIN in TCP flag define?

  A. Used to abort a TCP connection abruptly
  B. Used to close a TCP connection
  C. Used to acknowledge receipt of a previous packet or transmission
  D. Used to indicate the beginning of a TCP connection
  B. Used to close a TCP connection

• Question 68:

  TCP/IP Session Hijacking is carried out in which OSI layer?

  A. Datalink layer
  B. Transport layer
  C. Network layer
  D. Physical layer
  B. Transport layer

• Question 69:

  A corporation hired an ethical hacker to test if it is possible to obtain users' login credentials using methods other than social engineering. Access to offices and to a network node is granted. Results from server scanning indicate all are adequately patched and physical access is denied, thus, administrators have access only through Remote Desktop. Which technique could be used to obtain login credentials?

  A. Capture every users' traffic with Ettercap.
  B. Capture LANMAN Hashes and crack them with LC6.
  C. Guess passwords using Medusa or Hydra against a network service.
  D. Capture administrators RDP traffic and decode it with Cain and Abel.
  D. Capture administrators RDP traffic and decode it with Cain and Abel.

• Question 70:

  Which of the following parameters enables NMAP's operating system detection feature?

  A. NMAP -sV
  B. NMAP -oS
  C. NMAP -sR
  D. NMAP -O
  D. NMAP -O