EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 761:

  Which of the following statements are true regarding N-tier architecture? (Choose two.)

  A. Each layer must be able to exist on a physically independent system.
  B. The N-tier architecture must have at least one logical layer.
  C. Each layer should exchange information only with the layers above and below it.
  D. When a layer is changed or updated,the other layers must also be recompiled or modified.
  A. Each layer must be able to exist on a physically independent system.
  C. Each layer should exchange information only with the layers above and below it.

• Question 762:

  John the Ripper is a technical assessment tool used to test the weakness of which of the following?

  A. Usernames
  B. File permissions
  C. Firewall rulesets
  D. Passwords
  D. Passwords

• Question 763:

  Bob is acknowledged as a hacker of repute and is popular among visitors of "underground" sites. Bob is willing to share his knowledge with those who are willing to learn, and many have expressed their interest in learning from him. However, this knowledge has a risk associated with it, as it can be used for malevolent attacks as well.

  In this context, what would be the most affective method to bridge the knowledge gap between the "black" hats or crackers and the "white" hats or computer security professionals? (Choose the test answer)

  A. Educate everyone with books,articles and training on risk analysis,vulnerabilities and safeguards.
  B. Hire more computer security monitoring personnel to monitor computer systems and networks.
  C. Make obtaining either a computer security certification or accreditation easier to achieve so more individuals feel that they are a part of something larger than life.
  D. Train more National Guard and reservist in the art of computer security to help out in times of emergency or crises.
  A. Educate everyone with books,articles and training on risk analysis,vulnerabilities and safeguards.

• Question 764:

  Which of the following ensures that updates to policies, procedures, and configurations are made in a controlled and documented fashion?

  A. Regulatory compliance
  B. Peer review
  C. Change management
  D. Penetration testing
  C. Change management

• Question 765:

  Kevin has been asked to write a short program to gather user input for a web application.

  He likes to keep his code neat and simple. He chooses to use printf(str) where he should have ideally used printf(?s? str).

  What attack will his program expose the web application to?

  A. Cross Site Scripting
  B. SQL injection Attack
  C. Format String Attack
  D. Unicode Traversal Attack
  C. Format String Attack

• Question 766:

  Which of the following is one of the key features found in a worm but not seen in a virus?

  A. The payload is very small,usually below 800 bytes.
  B. It is self replicating without need for user intervention.
  C. It does not have the ability to propagate on its own.
  D. All of them cannot be detected by virus scanners.
  B. It is self replicating without need for user intervention.

• Question 767:

  Which of the following cryptography attack methods is usually performed without the use of a computer?

  A. Ciphertext-only attack
  B. Chosen key attack
  C. Rubber hose attack
  D. Rainbow table attack
  C. Rubber hose attack

• Question 768:

  This kind of password cracking method uses word lists in combination with numbers and special characters:

  A. Hybrid
  B. Linear
  C. Symmetric
  D. Brute Force
  A. Hybrid

• Question 769:

  In this attack, a victim receives an e-mail claiming from PayPal stating that their account has been disabled and confirmation is required before activation. The attackers then scam to collect not one but two credit card numbers, ATM PIN

  number and other personal details.

  Ignorant users usually fall prey to this scam.

  Which of the following statement is incorrect related to this attack?

  A. Do not reply to email messages or popup ads asking for personal or financial information
  B. Do not trust telephone numbers in e-mails or popup ads
  C. Review credit card and bank account statements regularly
  D. Antivirus,anti-spyware,and firewall software can very easily detect these type of attacks
  E. Do not send credit card numbers,and personal or financial information via e-mail
  D. Antivirus,anti-spyware,and firewall software can very easily detect these type of attacks

• Question 770:

  What port scanning method is the most reliable but also the most detectable?

  A. Null Scanning
  B. Connect Scanning
  C. ICMP Scanning
  D. Idlescan Scanning
  E. Half Scanning
  F. Verbose Scanning
  B. Connect Scanning