EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 651:

  SSL has been seen as the solution to a lot of common security problems. Administrator will often time make use of SSL to encrypt communications from points A to point B. Why do you think this could be a bad idea if there is an Intrusion Detection System deployed to monitor the traffic between point A and B?

  A. SSL is redundant if you already have IDS's in place
  B. SSL will trigger rules at regular interval and force the administrator to turn them off
  C. SSL will slow down the IDS while it is breaking the encryption to see the packet content
  D. SSL will blind the content of the packet and Intrusion Detection Systems will not be able to detect them
  D. SSL will blind the content of the packet and Intrusion Detection Systems will not be able to detect them

• Question 652:

  You have several plain-text firewall logs that you must review to evaluate network traffic. You know that in order to do this fast and efficiently you must user regular expressions. Which command-line utility are you most likely to use?

  A. Notepad
  B. MS Excel
  C. Grep
  D. Relational Database
  C. Grep

• Question 653:

  In keeping with the best practices of layered security, where are the best places to place intrusion detection/intrusion prevention systems? (Choose two.)

  A. HID/HIP (Host-based Intrusion Detection/Host-based Intrusion Prevention)
  B. NID/NIP (Node-based Intrusion Detection/Node-based Intrusion Prevention)
  C. NID/NIP (Network-based Intrusion Detection/Network-based Intrusion Prevention)
  D. CID/CIP (Computer-based Intrusion Detection/Computer-based Intrusion Prevention)
  A. HID/HIP (Host-based Intrusion Detection/Host-based Intrusion Prevention)
  C. NID/NIP (Network-based Intrusion Detection/Network-based Intrusion Prevention)

• Question 654:

  Which of the following is used to indicate a single-line comment in structured query language (SQL)?

  A. -
  B. ||
  C. %%
  D. ''
  A. -

• Question 655:

  You have been called to investigate a sudden increase in network traffic at XYZ. It seems that the traffic generated was too heavy that normal business functions could no longer be rendered to external employees and clients. After a quick investigation, you find that the computer has services running attached to TFN2k and Trinoo software.

  What do you think was the most likely cause behind this sudden increase in traffic?

  A. A distributed denial of service attack.
  B. A network card that was jabbering.
  C. A bad route on the firewall.
  D. Invalid rules entry at the gateway.
  A. A distributed denial of service attack.

• Question 656:

  While scanning a network you observe that all of the web servers in the DMZ are responding to ACK packets on port 80. What can you infer from this observation?

  A. They are using Windows based web servers.
  B. They are using UNIX based web servers.
  C. They are not using an intrusion detection system.
  D. They are not using a stateful inspection firewall.
  D. They are not using a stateful inspection firewall.

• Question 657:

  Which of the following security operations is used for determining the attack surface of an organization?

  A. Reviewing the need for a security clearance for each employee
  B. Running a network scan to detect network services in the corporate DMZ
  C. Training employees on the security policy regarding social engineering
  D. Using configuration management to determine when and where to apply security patches
  B. Running a network scan to detect network services in the corporate DMZ

• Question 658:

  Once an intruder has gained access to a remote system with a valid username and password, the attacker will attempt to increase his privileges by escalating the used account to one that has increased privileges. such as that of an administrator.

  What would be the best countermeasure to protect against escalation of priveges?

  A. Give users tokens
  B. Give user the least amount of privileges
  C. Give users two passwords
  D. Give users a strong policy document
  B. Give user the least amount of privileges

• Question 659:

  Fingerprinting an Operating System helps a cracker because:

  A. It defines exactly what software you have installed
  B. It opens a security-delayed window based on the port being scanned
  C. It doesn't depend on the patches that have been applied to fix existing security holes
  D. It informs the cracker of which vulnerabilities he may be able to exploit on your system
  D. It informs the cracker of which vulnerabilities he may be able to exploit on your system

• Question 660:

  Web servers are often the most targeted and attacked hosts on organizations' networks. Attackers may exploit software bugs in the Web server, underlying operating system, or active content to gain unauthorized access.

  

  Identify the correct statement related to the above Web Server installation?

  A. Lack of proper security policy,procedures and maintenance
  B. Bugs in server software,OS and web applications
  C. Installing the server with default settings
  D. Unpatched security flaws in the server software,OS and applications
  C. Installing the server with default settings