EC-COUNCIL EC-COUNCIL Certifications 312-50V7 Questions & Answers

• Question 71:

  How can a policy help improve an employee's security awareness?

  A. By implementing written security procedures, enabling employee security training, and promoting the benefits of security

  B. By using informal networks of communication, establishing secret passing procedures, and immediately terminating employees

  C. By sharing security secrets with employees, enabling employees to share secrets, and establishing a consultative help line

  D. By decreasing an employee's vacation time, addressing ad-hoc employment clauses, and ensuring that managers know employee strengths

  Correct Answer: A

• Question 72:

  Which statement is TRUE regarding network firewalls preventing Web Application attacks?

  A. Network firewalls can prevent attacks because they can detect malicious HTTP traffic.

  B. Network firewalls cannot prevent attacks because ports 80 and 443 must be opened.

  C. Network firewalls can prevent attacks if they are properly configured.

  D. Network firewalls cannot prevent attacks because they are too complex to configure.

  Correct Answer: B

• Question 73:

  In the OSI model, where does PPTP encryption take place?

  A. Transport layer

  B. Application layer

  C. Data link layer

  D. Network layer

  Correct Answer: C

• Question 74:

  What is the main advantage that a network-based IDS/IPS system has over a host-based solution?

  A. They do not use host system resources.

  B. They are placed at the boundary, allowing them to inspect all traffic.

  C. They are easier to install and configure.

  D. They will not interfere with user interfaces.

  Correct Answer: A

• Question 75:

  An NMAP scan of a server shows port 25 is open. What risk could this pose?

  A. Open printer sharing

  B. Web portal data leak

  C. Clear text authentication

  D. Active mail relay

  Correct Answer: D

• Question 76:

  Which of the following are variants of mandatory access control mechanisms? (Choose two.)

  A. Two factor authentication

  B. Acceptable use policy

  C. Username / password

  D. User education program

  E. Sign in register

  Correct Answer: AC

• Question 77:

  An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?

  A. Classified

  B. Overt

  C. Encrypted

  D. Covert

  Correct Answer: D

• Question 78:

  Which of the following is used to indicate a single-line comment in structured query language (SQL)?

  A. -

  B. ||

  C. %%

  D. ''

  Correct Answer: A

• Question 79:

  What is the primary drawback to using advanced encryption standard (AES) algorithm with a 256 bit key to share sensitive data?

  A. Due to the key size, the time it will take to encrypt and decrypt the message hinders efficient communication.

  B. To get messaging programs to function with this algorithm requires complex configurations.

  C. It has been proven to be a weak cipher; therefore, should not be trusted to protect sensitive data.

  D. It is a symmetric key algorithm, meaning each recipient must receive the key through a different channel than the message.

  Correct Answer: D

• Question 80:

  Pentest results indicate that voice over IP traffic is traversing a network. Which of the following tools will decode a packet capture and extract the voice conversations?

  A. Cain

  B. John the Ripper

  C. Nikto

  D. Hping

  Correct Answer: A