EC-COUNCIL EC-COUNCIL Certifications 312-50V8 Questions & Answers

• Question 891:

  Which method of password cracking takes the most time and effect?

  A. Rainbow Tables

  B. Shoulder surfing

  C. Bruce force

  D. Directory attack

  Correct Answer: C

• Question 892:

  To determine if a software program properly handles a wide range of invalid input, a form of automated testing can be used randomly generate invalid input in an attempt to crash the program.

  What term is commonly used when referring to this type of testing?

  A. Bounding

  B. Mutating

  C. Puzzing

  D. Randomizing

  Correct Answer: C

• Question 893:

  Using Windows CMD, how would an attacker list all the shares to which the current user context hasaccess?

  A. NET CONFIG

  B. NET USE

  C. NET FILE

  D. NET VIEW

  Correct Answer: D

• Question 894:

  During a blackbox pen test you attempt to pass IRC traffic over post 80/TCP from a compromised web enabled host. The traffic gets blocked; however outbound HTTP traffic is unimpeded.

  What type of firewall is inspecting outbound traffic?

  A. Circuit

  B. Packet Filtering

  C. Application

  D. Stateful

  Correct Answer: C

• Question 895:

  During a security audit of IT processes, an IS auditor found that there was no documented security procedures. What should the IS auditor do?

  A. Terminate the audit.

  B. Identify and evaluate existing practices.

  C. Create a procedures document

  D. Conduct compliance testing

  Correct Answer: B

• Question 896:

  The security concept of "separation of duties" is most similar to the operation ofwhich type of security device?

  A. Bastion host

  B. Honeypot

  C. Firewall

  D. Intrusion Detection System

  Correct Answer: C

• Question 897:

  Nation-state threat actors often discover vulnerabilitiesand hold on to them until they want to launch a sophisticated attack. The Stuxnet attack was an unprecedented style of attack because it used four types of this vulnerability.

  What is this style of attack called?

  A. zero-hour

  B. no-day

  C. zero-day

  D. zero-sum

  Correct Answer: C

• Question 898:

  When you return to your desk after a lunch break, you notice a strange email in your inbox. The senders is someone you did business with recently but the subject line has strange characters in it.

  What should you do?

  A. Forward the message to your company's security response team and permanently delete the message from your computer.

  B. Delete the email and pretend nothing happened.

  C. Forward the message to your supervisor andask for her opinion on how to handle the situation.

  D. Reply to the sender and ask them for more information about the message contents.

  Correct Answer: A

• Question 899:

  The configuration allows a wired or wireless network interface controller to pass all trafice it receives to thecentral processing unit (CPU), rather than passing only the frames that the controller is intended to receive.

  Which of the following is being described?

  A. WEM

  B. Multi-cast mode

  C. Promiscuous mode

  D. Port forwarding

  Correct Answer: B

• Question 900:

  Which of the following is a protocol specifically designed for transporting event messages?

  A. SMS

  B. SNMP

  C. SYSLOG

  D. ICMP

  Correct Answer: C