EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 661:

  Under the "Post-attach Phase and Activities," it is the responsibility of the tester to restore the system to a pre-test state. Which of the following activities should not be included in this phase?

  A. Removing all files uploaded on the system
  B. Cleaning all registry entries
  C. Mapping of network state
  D. Removing all tools and maintaining backdoor for reporting
  E. All should be included.
  A. Removing all files uploaded on the system

• Question 662:

  Which of the following items is unique to the N-tier architecture method of designing software applications?

  A. Application layers can be separated,allowing each layer to be upgraded independently from other layers.
  B. It is compatible with various databases including Access,Oracle,and SQL.
  C. Data security is tied into each layer and must be updated for all layers when any upgrade is performed.
  D. Application layers can be written in C,ASP.NET,or Delphi without any performance loss.
  A. Application layers can be separated,allowing each layer to be upgraded independently from other layers.

• Question 663:

  Which of the following is a detective control?

  A. Smart card authentication
  B. Security policy
  C. Audit trail
  D. Continuity of operations plan
  C. Audit trail

• Question 664:

  What does a firewall check to prevent particularports and applications from getting packets into an organizations?

  A. Transport layer port numbers and application layer headers
  B. Network layer headers and the session layer port numbers
  C. Application layer port numbers and the transport layer headers
  D. Presentation layer headers and the session layer port numbers
  A. Transport layer port numbers and application layer headers

• Question 665:

  In 2007, this wireless security algorithm was rendered useless by capturing packets and discovering the passkey in a matter of seconds. This security flaw led to a network invasion of TJ Maxx and data theft through a technique known wardriving.

  Which algorithm is this referring to?

  A. Wired Equivalent Privacy (WEP)
  B. Temporal Key Integrity Protocol (TRIP)
  C. Wi-Fi Protected Access (WPA)
  D. Wi-Fi Protected Access 2(WPA2)
  A. Wired Equivalent Privacy (WEP)

• Question 666:

  An attacker sniffs encrypted traffic from the network and is subsequently able to decrypt it.

  The attacker can now use which cryptanalytic technique to attempt to discover the encryption key?

  A. Birthday attack
  B. Plaintext attack
  C. Meet in the middle attack
  D. Chosen ciphertext attack
  D. Chosen ciphertext attack

• Question 667:

  A pentester gains acess to a Windows application server and needs to determine the settings of the built-in Windows firewall. Which command would be used?

  A. Netsh firewall show config
  B. WMIC firewall show config
  C. Net firewall show config
  D. Ipconfig firewall show config
  A. Netsh firewall show config

• Question 668:

  Lori is a Certified Ethical Hacker as well as a Certified Hacking Forensics Investigator working as an IT security consultant. Lori has been hired on by Kiley Innovators, a large marketing firm that recently underwent a string of thefts and corporate espionage incidents.

  Lori is told that a rival marketing company came out with an exact duplicate product right before Kiley Innovators was about to release it. The executive team believes that an employee is leaking information to the rival company. Lori questions all employees, reviews server logs, and firewall logs; after which she finds nothing. Lori is then given permission to search through the corporate email system. She searches by email being sent to and sent from the rival marketing company.

  She finds one employee that appears to be sending very large email to this other marketing company, even though they should have no reason to be communicating with them. Lori tracks down the actual emails sent and upon opening them, only finds picture files attached to them. These files seem perfectly harmless, usually containing some kind of joke. Lori decides to use some special software to further examine the pictures and finds that each one had hidden text that was stored in each picture.

  What technique was used by the Kiley Innovators employee to send information to the rival marketing company?

  A. The Kiley Innovators employee used cryptography to hide the information in the emails sent
  B. The method used by the employee to hide the information was logical watermarking
  C. The employee used steganography to hide information in the picture attachments
  D. By using the pictures to hide information,the employee utilized picture fuzzing
  C. The employee used steganography to hide information in the picture attachments

• Question 669:

  You just purchased the latest DELL computer, which comes pre-installed with Windows 7, McAfee antivirus software and a host of other applications. You want to connect Ethernet

  wire to your cable modem and start using the computer immediately. Windows is dangerously insecure when unpacked from the box, and there are a few things that you must do before you use it.

  A. New installation of Windows should be patched by installing the latest service packs and hotfixes
  B. Key applications such as Adobe Acrobat,Macromedia Flash,Java,Winzip etc.,must have the latest security patches installed
  C. Install a personal firewall and lock down unused ports from connecting to your computer
  D. Install the latest signatures for Antivirus software
  E. Configure "Windows Update" to automatic
  F. Create a non-admin user with a complex password and logon to this account
  G. You can start using your computer as vendors such as DELL,HP and IBM would have already installed the latest service packs.
  A. New installation of Windows should be patched by installing the latest service packs and hotfixes
  C. Install a personal firewall and lock down unused ports from connecting to your computer
  D. Install the latest signatures for Antivirus software
  E. Configure "Windows Update" to automatic
  F. Create a non-admin user with a complex password and logon to this account

• Question 670:

  Some passwords are stored using specialized encryption algorithms known as hashes.

  Why is this an appropriate method?

  A. It is impossible to crack hashed user passwords unless the key used to encrypt them is obtained.
  B. If a user forgets the password,it can be easily retrieved using the hash key stored by administrators.
  C. Hashing is faster compared to more traditional encryption algorithms.
  D. Passwords stored using hashes are non-reversible,making finding the password much more difficult.
  D. Passwords stored using hashes are non-reversible,making finding the password much more difficult.