EC-COUNCIL 312-50V8 Online Practice Questions and Exam Preparation

EC-COUNCIL 312-50V8 Online Questions & Answers

• Question 781:

  Which of the following is a characteristic of Public Key Infrastructure (PKI)?

  A. Public-key cryptosystems are faster than symmetric-key cryptosystems.
  B. Public-key cryptosystems distribute public-keys within digital signatures.
  C. Public-key cryptosystems do not require a secure key distribution channel.
  D. Public-key cryptosystems do not provide technical non-repudiation via digital signatures.
  B. Public-key cryptosystems distribute public-keys within digital signatures.

• Question 782:

  The follows is an email header. What address is that of the true originator of the message?

  

  A. 19.25.19.10
  B. 51.32.123.21
  C. 168.150.84.123
  D. 215.52.220.122
  E. 8.10.2/8.10.2
  C. 168.150.84.123

• Question 783:

  _________ ensures that the enforcement of organizational security policy does not rely on voluntary web application user compliance. It secures information by assigning sensitivity labels on information and comparing this to the level of security a user is operating at.

  A. Mandatory Access Control
  B. Authorized Access Control
  C. Role-based Access Control
  D. Discretionary Access Control
  A. Mandatory Access Control

• Question 784:

  Jackson discovers that the wireless AP transmits 128 bytes of plaintext, and the station responds by encrypting the plaintext. It then transmits the resulting ciphertext using the same key and cipher that are used by WEP to encrypt subsequent network traffic.

  What authentication mechanism is being followed here?

  A. no authentication
  B. single key authentication
  C. shared key authentication
  D. open system authentication
  C. shared key authentication

• Question 785:

  The SYN flood attack sends TCP connections requests faster than a machine can process them.

  How do you protect your network against SYN Flood attacks?

  A. SYN cookies. Instead of allocating a record,send a SYN-ACK with a carefully constructed sequence number generated as a hash of the clients IP address,port number,and other information. When the client responds with a normal ACK,that special sequence number will beincluded,which the server then verifies. Thus,the server first allocates memory on the third packet of the handshake,not the first.
  B. RST cookies - The server sends a wrong SYN/ACK back to the client. The client should then generate a RST packet telling the server that something is wrong. At this point,the server knows the client is valid and will now accept incoming connections from that client normally
  C. Check the incoming packet's IP address with the SPAM database on the Internet and enable the filter using ACLs at the Firewall
  D. Stack Tweaking. TCP stacks can be tweaked in order to reduce the effect of SYN floods. Reduce the timeout before a stack frees up the memory allocated for a connection
  E. Micro Blocks. Instead of allocating a complete connection,simply allocate a micro record of 16-bytes for the incoming SYN object
  A. SYN cookies. Instead of allocating a record,send a SYN-ACK with a carefully constructed sequence number generated as a hash of the clients IP address,port number,and other information. When the client responds with a normal ACK,that special sequence number will beincluded,which the server then verifies. Thus,the server first allocates memory on the third packet of the handshake,not the first.
  B. RST cookies - The server sends a wrong SYN/ACK back to the client. The client should then generate a RST packet telling the server that something is wrong. At this point,the server knows the client is valid and will now accept incoming connections from that client normally
  D. Stack Tweaking. TCP stacks can be tweaked in order to reduce the effect of SYN floods. Reduce the timeout before a stack frees up the memory allocated for a connection
  E. Micro Blocks. Instead of allocating a complete connection,simply allocate a micro record of 16-bytes for the incoming SYN object

• Question 786:

  A security analyst is performing an audit on the network to determine if there are any deviations from the security policies in place. The analyst discovers that a user from the IT department had a dial-out modem installed. Which security policy must the security analyst check to see if dial-out modems are allowed?

  A. Firewall-management policy
  B. Acceptable-use policy
  C. Remote-access policy
  D. Permissive policy
  C. Remote-access policy

• Question 787:

  It is a regulation that has a set if guideline,which should be adhered to by anyone who handles any electronic medical data. These guidelines stipulate that all medical practices must ensure that all necessary measures are in place while saving, accessing, and sharing any electronic medical data to keep patient data secure.

  Which of the following regulations best matches the description?

  A. HIPAA
  B. COBIT
  C. ISO/IEC 27002
  D. FISMA
  A. HIPAA

• Question 788:

  Which of the following is a hardware requirement that either an IDS/IPS system or a proxy server must have in order to properly function?

  A. Fast processor to help with network traffic analysis
  B. They must be dual-homed
  C. Similar RAM requirements
  D. Fast network interface cards
  B. They must be dual-homed

• Question 789:

  Which of the following describes a component of Public Key Infrastructure (PKI) where a copy of a private key is stored to provide third-party access and to facilitate recovery operations?

  A. Key registry
  B. Recovery agent
  C. Directory
  D. Key escrow
  D. Key escrow

• Question 790:

  When a malicious hacker identifies a target and wants to eventually compromise this target, what would be among the first steps that he would perform? (Choose the best answer)

  A. Cover his tracks by eradicating the log files and audit trails.
  B. Gain access to the remote computer in order to conceal the venue of attacks.
  C. Perform a reconnaissance of the remote target for identical of venue of attacks.
  D. Always begin with a scan in order to quickly identify venue of attacks.
  C. Perform a reconnaissance of the remote target for identical of venue of attacks.