EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 401:

  Which method can provide a better return on IT security investment and provide a thorough and comprehensive assessment of organizational security covering policy, procedure design, and implementation?

  A. Penetration testing
  B. Social engineering
  C. Vulnerability scanning
  D. Access control list reviews
  A. Penetration testing

• Question 402:

  Which statement is TRUE regarding network firewalls preventing Web Application attacks?

  A. Network firewalls can prevent attacks because they can detect malicious HTTP traffic.
  B. Network firewalls cannot prevent attacks because ports 80 and 443 must be opened.
  C. Network firewalls can prevent attacks if they are properly configured.
  D. Network firewalls cannot prevent attacks because they are too complex to configure.
  B. Network firewalls cannot prevent attacks because ports 80 and 443 must be opened.

• Question 403:

  A company has hired a security administrator to maintain and administer Linux and Windows-based systems. Written in the nightly report file is the followinG.

  Firewall log files are at the expected value of 4 MB. The current time is 12am. Exactly two hours later the size has decreased considerably. Another hour goes by and the log files have shrunk in size again.

  Which of the following actions should the security administrator take?

  A. Log the event as suspicious activity and report this behavior to the incident response team immediately.
  B. Log the event as suspicious activity,call a manager,and report this as soon as possible.
  C. Run an anti-virus scan because it is likely the system is infected by malware.
  D. Log the event as suspicious activity,continue to investigate,and act according to the site's security policy.
  D. Log the event as suspicious activity,continue to investigate,and act according to the site's security policy.

• Question 404:

  What type of port scan is shown below?

  

  A. Idle Scan
  B. Windows Scan
  C. XMAS Scan
  D. SYN Stealth Scan
  C. XMAS Scan

• Question 405:

  Say that "abigcompany.com" had a security vulnerability in the javascript on their website in the past. They recently fixed the security vulnerability, but it had been there for many months. Is there some way to 4go back and see the code for that error? Select the best answer.

  A. archive.org
  B. There is no way to get the changed webpage unless you contact someone at the company
  C. Usenet
  D. Javascript would not be in their html so a service like usenet or archive wouldn't help you
  A. archive.org

• Question 406:

  You are trying to hijack a telnet session from a victim machine with IP address 10.0.0.5 to Cisco router at 10.0.0.1. You sniff the traffic and attempt to predict the sequence and acknowledgement numbers to successfully hijack the telnet session.

  Here is the captured data in tcpdump.

  

  What are the next sequence and acknowledgement numbers that the router will send to the victim machine?

  A. Sequence number: 82980070 Acknowledgement number: 17768885A.
  B. Sequence number: 17768729 Acknowledgement number: 82980070B.
  C. Sequence number: 87000070 Acknowledgement number: 85320085C.
  D. Sequence number: 82980010 Acknowledgement number: 17768885D.
  A. Sequence number: 82980070 Acknowledgement number: 17768885A.

• Question 407:

  A hacker has successfully infected an internet-facing server, which he will then use to send junk mail, take part incoordinated attacks, or host junk email content. Which sort of trojan infects this server?

  A. Botnet Trojan
  B. Banking Trojans
  C. Ransomware Trojans
  D. Turtle Trojans
  A. Botnet Trojan

• Question 408:

  During a recent security assessment, you discover the organization has one Domain Name Server (DNS) in a Demilitarized Zone (DMZ) and a second DNS server on the internal Network. What is this type of DNS configuration commonly called?

  A. DNS Scheme
  B. DynDNS
  C. Split DNS
  D. DNSSEC
  C. Split DNS

• Question 409:

  In what stage of Virus life does a stealth virus gets activated with the user performing certain actions such as running an infected program?

  A. Design
  B. Elimination
  C. Incorporation
  D. Replication
  E. Launch
  F. Detection
  E. Launch

• Question 410:

  Which of the following viruses tries to hide from anti-virus programs by actively altering and corrupting the chosen service call interruptions when they are being run?

  A. Cavity virus
  B. Polymorphic virus
  C. Tunneling virus
  D. Stealth virus
  D. Stealth virus