EC-COUNCIL EC-COUNCIL Certifications 312-50V7 Questions & Answers

• Question 81:

  Information gathered from social networking websites such as Facebook, Twitter and LinkedIn can be used to launch which of the following types of attacks? (Choose two.)

  A. Smurf attack

  B. Social engineering attack

  C. SQL injection attack

  D. Phishing attack

  E. Fraggle attack

  F. Distributed denial of service attack

  Correct Answer: BD

• Question 82:

  Which of the following examples best represents a logical or technical control?

  A. Security tokens

  B. Heating and air conditioning

  C. Smoke and fire alarms

  D. Corporate security policy

  Correct Answer: A

• Question 83:

  Which of the following resources does NMAP need to be used as a basic vulnerability scanner covering several vectors like SMB, HTTP and FTP?

  A. Metasploit scripting engine

  B. Nessus scripting engine

  C. NMAP scripting engine

  D. SAINT scripting engine

  Correct Answer: C

• Question 84:

  A penetration tester is hired to do a risk assessment of a company's DMZ. The rules of engagement states that the penetration test be done from an external IP address with no prior knowledge of the internal IT systems. What kind of test is being performed?

  A. white box

  B. grey box

  C. red box

  D. black box

  Correct Answer: D

• Question 85:

  A technician is resolving an issue where a computer is unable to connect to the Internet using a wireless access point. The computer is able to transfer files locally to other machines, but cannot successfully reach the Internet. When the technician examines the IP address and default gateway they are both on the 192.168.1.0/24. Which of the following has occurred?

  A. The gateway is not routing to a public IP address.

  B. The computer is using an invalid IP address.

  C. The gateway and the computer are not on the same network.

  D. The computer is not using a private IP address.

  Correct Answer: A

• Question 86:

  A Network Administrator was recently promoted to Chief Security Officer at a local university. One of employee's new responsibilities is to manage the implementation of an RFID card access system to a new server room on campus. The server room will house student enrollment information that is securely backed up to an off-site location.

  During a meeting with an outside consultant, the Chief Security Officer explains that he is concerned that the existing security controls have not been designed properly. Currently, the Network Administrator is responsible for approving and issuing RFID card access to the server room, as well as reviewing the electronic access logs on a weekly basis.

  Which of the following is an issue with the situation?

  A. Segregation of duties

  B. Undue influence

  C. Lack of experience

  D. Inadequate disaster recovery plan

  Correct Answer: A

• Question 87:

  What are common signs that a system has been compromised or hacked? (Choose three.)

  A. Increased amount of failed logon events

  B. Patterns in time gaps in system and/or event logs

  C. New user accounts created

  D. Consistency in usage baselines

  E. Partitions are encrypted

  F. Server hard drives become fragmented

  Correct Answer: ABC

• Question 88:

  A recently hired network security associate at a local bank was given the responsibility to perform daily scans of the internal network to look for unauthorized devices. The employee decides to write a script that will scan the network for unauthorized devices every morning at 5:00 am.

  Which of the following programming languages would most likely be used?

  A. PHP

  B. C#

  C. Python

  D. ASP.NET

  Correct Answer: C

• Question 89:

  While performing data validation of web content, a security technician is required to restrict malicious input. Which of the following processes is an efficient way of restricting malicious input?

  A. Validate web content input for query strings.

  B. Validate web content input with scanning tools.

  C. Validate web content input for type, length, and range.

  D. Validate web content input for extraneous queries.

  Correct Answer: C

• Question 90:

  The precaution of prohibiting employees from bringing personal computing devices into a facility is what type of security control?

  A. Physical

  B. Procedural

  C. Technical

  D. Compliance

  Correct Answer: B